Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function
Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter
HurryTimer <= 2.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name
Qubely – Advanced Gutenberg Blocks <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID'
Return Refund and Exchange For WooCommerce <= 4.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference
Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Instaclustr Cassandra-Lucene-Index allows bypass of Cassandra RBAC
Quarkus REST Endpoint Request Parameter Leakage Due to Shared Instance
Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user
Remote code execution in alextselegidis/easyappointments
Easy!Appointments Improper Restriction of Excessive Authentication Attempts
Global Meta Keyword & Description <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Page/Post Specific Social Share Buttons <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Post Thumbs <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket Deletion
Wibiya Toolbar <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
ClickWhale <= 2.4.3 - Cross-Site Request Forgery
Easy Amazon Product Information <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Aparat Responsive <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Glance That <= 4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Bootstrap collapse <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Reflected Cross-Site Scripting
RSS Filter <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.