Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Ultra Portfolio <= 6.7 - Authenticated (Subscriber+) SQL Injection
Hydra Booking <= 1.1.32 - Unauthenticated Privilege Escalation
Paid Downloads <= 3.15 - Unauthenticated SQL Injection
Lawyer Directory <= 1.3.3 - Authenticated (Subscriber+) Privilege Escalation
WorkScout-Core <= 1.7.06 - Unauthenticated Stored Cross-Site Scripting
Beaver Builder <= 2.9.4.1 - Authenticated (Contributor+) Remote Code Execution
eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection
Textmetrics <= 3.6.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
BackItUp <= 2.1.0 - Missing Authorization
User Registration <= 4.4.6 - Missing Authorization
WP Docs <= 2.2.8 - Missing Authorization
JobWP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting
B Accordion <= 2.0.2 - Authenticated (Contributor+) Information Exposure
Tabby Checkout <= 5.8.4 - Unauthenticated Information Exposure
Nelio Content <= 4.2.0 - Authenticated (Contributor+) SQL Injection
WorkScout <= 4.1.07 - Unauthenticated Stored Cross-Site Scripting
Extend Link <= 2.0.0 - Authenticated (Contributor+) Server-Side Request Forgery
iNET Webkit <= 1.2.4 - Missing Authorization
MyHome Core <= 4.1.0 - Unauthenticated Local File Inclusion
Travel <= 11.1.0 - Missing Authorization
BOX NOW Delivery <= 3.0.2 - Missing Authorization
binary-parser library has a code injection vulnerability
Turbo Frame responses can restore stale session cookies
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.