Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
xili-language <= 2.21.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Append extensions on Pages <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Penci Filter Everything < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Members <= 3.5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Heureka <= 1.1.0 - Missing Authorization
Interact: Embed A Quiz On Your Site <= 3.1 - Cross-Site Request Forgery
Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection
Skimlinks Affiliate Marketing Tool <= 1.3 - Authenticated (Administrator+) Server-Side Request Forgery
Skyword API Plugin <= 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Login-Logout <= 3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Classic Widgets with Block-based Widgets <= 1.0.1 - Missing Authorization
Advanced Custom Fields : CPT Options Pages <= 2.0.9 - Cross-Site Request Forgery
Booking and Rental Manager <= 2.5.4 - Authenticated (Contributor+) PHP Object Injection
Simple User Registration <= 6.4 - Authenticated (Contributor+) Privilege Escalation
Dokan <= 4.1.3 - Authenticated (Shop Manager+) Privilege Escalation
Likert Survey Master <= 0.8.0.1 - Reflected Cross-Site Scripting
SEO Pyramid <= 1.10.0 - Reflected Cross-Site Scripting
Liferay Portal Commerce component has Incorrect Permission Assignment for Critical Resource
Liferay Portal Cross-Site Request Forgery (CSRF) vulnerability
Liferay Contacts Center widget has insecure direct object reference
osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Custom Login And Signup Widget <= 1.0 - Cross-Site Request Forgery
Browser Sniff <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.