Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'
WPB Quick View for WooCommerce <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wp tabber widget <= 4.0 - Authenticated (Contributor+) SQL Injection
Penci Podcast <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
VikRestaurants Table Reservations and Take-Away <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Zoho Flow <= 2.14.1 - Cross-Site Request Forgery
Auction Feed <= 1.1.3 - Cross-Site Request Forgery
Custom Post Type Images <= 0.5 - Cross-Site Request Forgery
GetResponse Forms <= 2.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Page-list <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
wpDiscuz <= 7.6.33 - Missing Authorization
Helpie FAQ <= 1.45 - Unauthenticated Sensitive Information Exposure
Pinterest Pinboard Widget <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CardCom Payment Gateway <= 3.5.0.4 - Missing Authorization
Qubely <= 1.8.14 - Missing Authorization
IP Based Login <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
All In One SEO Pack <= 4.8.7.1 - Missing Authorization
Show Pages List <= 1.2.0 - Cross-Site Request Forgery
Soledad <= 8.6.8 - Authenticated (Contributor+) Local File Inclusion
SALESmanago <= 3.8.1 - Missing Authorization
Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload
WP Advanced PDF <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
SEO Backlink Monitor <= 1.6.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.