Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
One Click Close Comments <= 2.7.1 - Unauthenticated Full Path Disclosure
Ultimate WordPress Auction Plugin <= 4.2.7 - Missing Authorization to Unauthenticated Email Creation
Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_lp_export_xml
Admin Post Navigation <= 2.1 - Unauthenticated Full Path Disclosure
Admin Trim Interface <= 3.5.1 - Unauthenticated Full Path Disclosure
Intelligence <= 1.4.0 - Unauthenticated Full Path Disclosure
ParityPress <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Flipbox Builder <= 1.5 - Authenticated (Contributor+) PHP Object Injection
Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure
Add Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosure
Elasticsearch Insertion of Sensitive Information into Log File
Master Currency WP <= 1.1.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via Currency Converter Form Shortcode
WooCommerce Product Table Lite <= 3.5.1 - Missing Authorization to (Subscriber+) Stored Cross-Site Scripting
Campaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path Disclosure
Grow by Tradedoubler <= 2.0.21 - Unauthenticated Local File Inclusion
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields
Media.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure
Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_import_from_xml
IgnitionDeck Crowdfunding Platform <= 1.9.8 - Missing Authorization
Craft CMS Allows TOTP Token To Stay Valid After Use
OpenAM FreeMarker template injection
Remote code execution in Spring Cloud Data Flow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.