Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Welcome Popup Update
Wordpress Simple Share Plugin <= 0.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to SMTP Settings Update
Opti Marketing <= 2.0.9 - Unauthenticated SQL Injection
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Exit Popup Update
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Settings Update
DL Robots.txt <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
TrueBooker <= 1.0.3 - Unauthenticated SQL Injection
DL Verification <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
WP MultiTasking <= 0.1.12 - Reflected Cross-Site Scripting
CometVisu Backend for openHAB has a path traversal vulnerability
CometVisu Backend for openHAB affected by RCE through path traversal
CometVisu Backend for openHAB has a sensitive information disclosure vulnerability
CometVisu Backend for openHAB affected by SSRF/XSS
Opal Membership <= 1.2.4 - Authenticated (Subscriber+) Information Disclosure
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
Opal Membership <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
BSK Forms Blacklist <= 3.8 - Reflected Cross-Site Scripting
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text
Shared Files <= 1.7.28 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.