Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Quote-O-Matic <= 1.0.5 - Authenticated (Administrator+) SQL Injection
Conditional Shipping for WooCommerce <= 2.3.1 - Cross-Site Request Forgery
multimedial images <= 1.0b - Authenticated (Administrator+) SQL Injection
Launchpad <= 1.0.13 - Cross-Site Request Forgery
OWM Weather <= 5.6.11 - Cross-Site Request Forgery
WP Cerber Security <= 9.3.2 - User Enumeration Bypass via REST API
Web Invoice <= 2.1.3 - Authenticated SQL Injection
Universal Star Rating <= 1.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Sunshine Photo Cart <= 2.9.14 - Reflected Cross-Site Scripting
phpMyFAQ vulnerable to Cross-site Scripting
phpMyFAQ vulnerable to Cross-site Scripting
phpMyFAQ has insecure HTTP cookies
Image Hover Effects Ultimate 9.8.1 - 9.8.4 - Authenticated (Admin+) Stored Cross-Site Scripting
demon image annotation <= 5.0 - Improper Input Restriction Validation
Sentry vulnerable to invite code reuse via cookie manipulation
Yii2 Gii Cross-site Scripting vulnerability
Spring Boot Admins integrated notifier support allows arbitrary code execution
Akeneo PIM Community Edition vulnerable to remote php code execution
Mingsoft MCMS vulnerable to SQL Injection
Clearpay Gateway for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting
Woocommerce Vietnam Checkout <= 2.0.4 - Reflected Cross-Site Scripting
Product Reviews Import Export for WooCommerce <= 1.4.8 - CSV Injection
All-In-One Security <= 5.1.2 - Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.