Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Cross site scripting in Apache JSPWiki
WP eStore <= 8.5.4 - Cross-Site Request Forgery to Coupon Deletion
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Discount Editing
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Arbitrary File Upload
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via REQUEST_URI
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Customer Editing
Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Category Editing
WPS Hide Login <= 1.9.16.3 - Login Page Disclosure
WordPress Core < 6.5.5 - Authenticated (Contributor+) Directory Traversal
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Template Part Block
Remote Code Execution via path traversal bypass in lollms
Zip slip in opencart
Arbitrary File Creation in opencart
Cross site scripting in opencart
Cross site scripting in opencart
Cross site scripting in opencart
SQL injection in opencart
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via Member Edit
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers <= 1.12.13 - Authenticated (Editor+) Stored Cross-Site Scripting
Support SVG <= 1.0.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.