Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
changedetection.io is Vulnerable to SSRF via Watch URLs
Tribe <= 1.7.3 - Unauthenticated Local File Inclusion
weDocs <= 2.1.18 - Missing Authorization
Helvig <= 1.0 - Unauthenticated Local File Inclusion
FixTeam | Electronics & Mobile Devices Repair WordPress Theme <= 1.4 - Unauthenticated Local File Inclusion
Cocco - Kids Store and Baby Shop WordPress Theme <= 2.0 - Unauthenticated Local File Inclusion
FSM Custom Featured Image Caption <= 1.25.1 - Authenticated (Author+) Stored Cross-Site Scripting
Aviana <= 2.1 - Unauthenticated Local File Inclusion
Alchemists <= 4.6.0 - Unauthenticated Local File Inclusion
Great Lotus | Buddhist Temple WordPress Theme + RTL <= 1.3.1 - Unauthenticated Local File Inclusion
Innovio - Multipurpose Landing Page WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
WooCommerce Coming Soon Product with Countdown <= 5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CloudMe | Cloud Storage & File-Sharing WordPress Theme <= 1.2.2 - Unauthenticated Local File Inclusion
Evently <= 1.7 - Unauthenticated Local File Inclusion
Bakery Autoresponder Addon <= 1.0.6 - Missing Authorization
Bakery Autoresponder Addon <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
Pochipp < 1.18.9 - Missing Authorization
The Issue <= 1.6.11 - Unauthenticated Local File Inclusion
Advanced Woo Labels <= 2.36 - Authenticated (Admin+) Remote Code Execution
Architecturer < 3.9.5 - Reflected Cross-Site Scripting
Scientific and Interactive Blocks – inseri core <= 1.0.5 - Missing Authorization
Zentrum <= 1.0 - Unauthenticated Local File Inclusion
Awa Plugins <= 1.4.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.