Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
AceIDE <= 2.6.2 - Authenticated (Admin+) Arbitrary File Read
Email Subscriber <= 1.1 - Stored Cross-Site Scripting
Timeline Calendar <= 1.2 - Authenticated (Admin+) SQL Injection
Broken Link Manager <= 0.6.5 - Authenticated (Admin+) SQL Injection
GTranslate Pro and GTranslate Enterprise <= 2.8.64 - Reflected Cross-Site Scripting
Diary & Availability Calendar <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
Embed Youtube Video <= 1.0 - Authenticated (Admin+) SQL Injection
WordPress Membership SwiftCloud.io <= 1.0 - Authenticated (Admin+) SQL Injection
Cashtomer <= 1.0.0 - Authenticated (Admin+) SQL Injection
Comment Highlighter <= 0.13 - Authenticated (Admin+) SQL Injection
Simple Post <= 1.1 - Stored Cross-Site Scripting
Easy Testimonial Manager <= 1.2.0 - Authenticated (Admin+) SQL Injection
WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 <= 3.7.2 - Authenticated (Admin+) SQL Injection
Denial of Service in SheetJS Pro
Denial of Service in SheetsJS Pro
Denial of Service in SheetJS Pro
Privilege escalation: all users can access Admin-level API keys
Cross-Site Scripting in Backend Grid View
Cross-Site Scripting in Query Generator & Query View
Cross-Site Scripting in Page Preview
WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion
drupal/form_mode_manager - SA-CONTRIB-2021-023
Drupal core - SA-CORE-2021-004
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.