Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Simple Crypto Shortcodes <= 1.0.2 - Cross-Site Request Forgery to Plugin Settings Update
VK Google Job Posting Manager <= 1.2.23 - Authenticated (Author+) Stored Cross-Site Scripting via Job Description Field
Kalrav AI Agent <= 2.3.8 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action
LavaLite CMS affected by a stored cross-site scripting vulnerability
XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages
Hibernate vulnerable to SQL Injection
Moodle affected by a code injection vulnerability
GeoDirectory <= 2.8.149 - Cross-Site Request Forgery
LeadConnector <= 3.0.21 - Missing Authorization
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authenticated (Subscriber+) Information Exposure
Happy Addons for Elementor <= 3.20.4 - Authenticated (Contributor+) SQL Injection
Extensions For CF7 <= 3.4.0 - Authenticated (Contributor+) Insecure Direct Object Reference
Blockons <= 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
UPI QR Code Payment Gateway for WooCommerce <= 1.5.1 - Missing Authorization
Coven Core <= 1.3 - Unauthenticated SQL Injection
PeakShops <= 1.5.9 - Authenticated (Contributor+) PHP Object Injection
SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Advanced WooCommerce Product Sales Reporting <= 4.1.2 - Unauthenticated Information Exposure
Radio Player <= 2.0.91 - Unauthenticated Server-Side Request Forgery
PeakShops < 1.5.9 - Unauthenticated Local File Inclusion
Monetag Official <= 1.1.3 - Missing Authorization
Sunshine Photo Cart <= 3.5.7.2 - Missing Authorization
amr cron manager <= 2.3 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.