Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Team Members <= 5.2.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Afterpay Gateway for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting
Cryptocurrency Widgets Pack <= 2.0 - Unauthenticated SQL Injection
Superio - Job Board <= 1.2.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting
LetsRecover <= 1.1.0 - Authenticated (Admin+) SQL Injection
WP User <= 7.0 - Unauthenticated SQL Injection
LetsRecover <= 1.1.0 - Authenticated (Admin+) SQL Injection
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
Custom Field Template <= 2.5.7 - Authenticated (Administrator+) PHP Object Injection
WP-Lister Lite for Amazon <= 2.4.2 - Reflected Cross-Site Scripting
Visual Email Designer for WooCommerce <= 1.7.1 - Authenticated (Author+) SQL Injection
Cross-site scripting vulnerability in TinyMCE alerts
PrestaShop has potential Information exposure in the upload directory
Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List
Mingsoft MCMS vulnerable to Cross-site Scripting
RuoYi-Cloud Cross-site Scripting vulnerability
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.10 - Authenticated (Admin+) Cross-Site Scripting
Joy Of Text Lite – SMS messaging for WordPress <= 2.3.0 - Unauthenticated SQL Injection
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection
White Label CMS <= 2.4 - Authenticated (Administrator+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.