Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Flexible Woocommerce Checkout Field Editor <= 2.0.1 - Missing Authorization
Ultimate Dashboard <= 3.7.10 - Login Page Disclosure on Multi-site
Genesis Simple Love <= 2.0 - Unauthenticated PHP Object Injection
WP Photo Album Plus <= 8.5.02.005 - Cross-Site Scripting
Integrate Google Drive <= 1.3.4 - Cross-Site Request Forgery
Code Embed <= 2.3.6 - Authenticated(Contributor+) Denial of Service
CSV Importer <= 0.3.8 - Cross-Site Request Forgery
WOOCS – WooCommerce Currency Switcher <= 1.4.1.4 - Cross-Site Request Forgery via delete_profiles_data
WooCommerce Payments <= 6.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Spectra <= 2.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
RegistrationMagic <= 5.2.3.0 - Missing Authorization
LiveChat <= 4.5.15 - Cross-Site Request Forgery
Structured Content <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection
Product Catalog Feed by PixelYourSite <= 2.1.1 - Cross-Site Request Forgery
WappPress <= 5.0.3 - Unauthenticated Arbitrary File Upload
Fix My Feed RSS Repair <= 1.4 - Cross-Site Request Forgery
WP Photo Album Plus <= 8.5.02.005 - IP Spoofing
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
jupyter-server errors include tracebacks with path information
Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download
Solon is vulnerable to Deserialization of Untrusted Data
ThinkAdmin arbitrary file upload vulnerability
Logging of the firestore key within nodejs-firestore
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.