Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Penci Filter Everything <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Post Expirator <= 4.9.3 - Missing Authorization
Penci Shortcodes & Performance <= 6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Landing Page Builder <= 1.5.3.4 - Authenticated (Author+) Stored Cross-Site Scripting
QuestDB UI's Web Console is Vulnerable to Cross-Site Scripting
Terms descriptions <= 3.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Suggestion Toolkit <= 5.0 - Missing Authorization
Neoforum <= 1.0 - Reflected Cross-Site Scripting
Neoforum <= 1.0 - Authenticated (Administrator+) SQL Injection
vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions
File Uploads Addon for WooCommerce <= 1.7.3 - Missing Authorization
Logo Slider <= 5.5.3 - Authenticated (Author+) Stored Cross-Site Scripting
Trusona for WordPress <= 2.0.0 - Missing Authorization
Salesforce Uni2TS has a Code Injection vulnerability
Copyscape Premium <= 1.4.1 - Cross-Site Request Forgery
Merge + Minify + Refresh <= 2.14 - Cross-Site Request Forgery
Crumber <= 1.0.10 - Missing Authorization
RegistrationMagic <= 6.0.6.9 - Cross-Site Request Forgery
Creator LMS <= 1.1.12 - Missing Authorization
TheGem Theme Elements (for Elementor) <= 5.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Soledad <= 8.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
TheGem Theme Elements (for Elementor) <= 5.11.0 - Authenticated (Contributor+) Local File Inclusion
Uper for Elementor <= 1.0.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.