Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 33
Reset filtersHouzez Login Register <= 3.3.3 - Unauthenticated Privilege Escalation
Houzez Property Feed <= 2.5.46 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Houzez Theme - Functionality <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search
Houzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Houzez Theme - Functionality < 4.2.0 - Unauthenticated Stored Cross-Site Scripting
Houzez Theme - Functionality <= 4.1.8 - Authenticated (Contributor+) Local File Inclusion
Houzez < 4.2.0 - Unauthenticated Local File Inclusion
Houzez Theme - Functionality < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Houzez Theme - Functionality <= 4.1.2 - Missing Authorization
Houzez Theme - Functionality <= 4.1.2 - Authenticated (Subscriber+) Arbitrary File Download
Houzez <= 4.1.1 - Unauthenticated Local File Inclusion
Houzez <= 4.1.1 - Reflected Cross-Site Scripting
Houzez CRM <= 1.4.7 - Missing Authorization
Houzez <= 4.1.1 - Missing Authorization
Houzez <= 4.0.4 - Missing Authorization
Houzez <= 4.1.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Houzez <= 4.0.4 - Unauthenticated Local File Inclusion
Houzez Property Feed <= 2.5.4 - Unauthenticated Arbitrary File Download
Houzez Property Feed <= 2.4.21 - Cross-Site Request Forgery to Property Feed Export Deletion
Houzez <= 3.4.0 - Missing Authorization
Houzez <= 3.4.1 - Missing Authorization
Houzez <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.