Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Voice Feedback – Voice Recorder for Audio Feedback <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
Product Catalog Simple <= 1.8.4 - Cross-Site Request Forgery
Simple Content Templates for Blog Posts & Pages <= 2.2.61 - Cross-Site Request Forgery
UiChemy <= 4.0.0 - Missing Authorization
UPC/EAN/GTIN Code Generator <= 2.0.2 - Cross-Site Request Forgery
HomeLancer <= 1.0.1 - Missing Authorization
UDesign Core <= 4.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kallyas <= 4.22.0 - Missing Authorization
Paid Videochat Turnkey Site <= 7.3.23 - Authenticated (Admin+) Remote Code Execution
WPCasa <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
MeetingHub <= 1.23.9 - Missing Authorization
Houzez Theme - Functionality < 4.2.0 - Unauthenticated Stored Cross-Site Scripting
Houzez Theme - Functionality <= 4.1.8 - Authenticated (Contributor+) Local File Inclusion
Houzez < 4.2.0 - Unauthenticated Local File Inclusion
TheGem Theme Elements (for WPBakery) <= 5.10.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
One Page Express Companion <= 1.6.43 - Missing Authorization
News Event <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
MasterStudy LMS <= 3.6.20 - Authenticated (Instructor+) Sensitive Information Exposure
Advanced Coupons for WooCommerce Coupons <= 4.6.8 - Authenticated (Shop manager+) SQL Injection
Academist < 1.3 - Unauthenticated Local File Inclusion
Houzez Theme - Functionality < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Salient < 17.4.0 - Missing Authorization
tagDiv Composer <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.