Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersHDW WordPress Video Gallery <= 1.2 - Reflected Cross-Site Scripting via playlist parameter
HDW WordPress Video Gallery <= 1.2 - Reflected Cross-Site Scripting via channel parameter
Zotpress < 6.1.3 - SQL Injection
iThemes Security <= 5.6.1 - Stored Cross-Site Scripting
Appointment Calendar <= 2.7.4 - Multiple Reflected Cross-Site Scripting
WP Editor <= 1.2.6.2 - Cross-Site Scripting
Portfolio Gallery <= 2.1.0 - Reflected Cross-Site Scripting
WordPress Appointment Schedule Booking System <=1.0 - Stored Cross-Site Scripting
Members Import <= 1.3 - Cross-Site Request Forgery to User Import and Cross-Site Scripting
WordPress Core < 4.5 - Server-Side Request Forgery
Google Doc Embedder <= 2.6.1 - Cross-Site Scripting
Google Doc Embedder <= 2.6.1 - Cross-Site Request Forgery
iThemes Security <= 5.6.1 - Sensitive Information Exposure via Diff Response
W3 Total Cache <= 0.9.4.1 - Arbitrary Code Execution via settings import
W3 Total Cache <= 0.9.4.1 - Authenticated Arbitrary File Download
W3 Total Cache <= 0.9.4.1 - Arbitrary File Upload
W3 Total Cache <= 0.9.4.1 - Security Token Bypass via Type Juggling
Google Doc Embedder <= 2.6 - Cross-Site Scripting
Support Plus Responsive Ticket System < 7.1.0 - Insecure Direct Object Reference
Neosense - Multipurpose WordPress Theme | WordPress < 1.8 - Arbitrary File Upload
PPOM for WooCommerce <= 1.1 - Arbitrary File Upload
A vulnerability in the PPOM for WooCommerce plugin allows unauthenticated attackers to upload arbitrary files due to missing file type validation, potentially leading to remote code execution.
Simple Membership <= 3.3.2 - Multiple Cross-Site Request Forgery
Podlove Podcast Publisher < 2.3.16 - Cross-Site Request Forgery to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.