Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
ListingPro <= 2.9.4 - Authenticated (Subscriber+) Local File Inclusion
Generate Images – Magic Post Thumbnail <= 5.2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Himalayas <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Custom Query Blocks <= 5.2.0 - Missing Authorization via REST Routes
ListingPro Plugin <= 2.9.4 - Unauthenticated Local File Inclusion
Language Translate Widget for WordPress – ConveyThis <= 234 - Missing Authorization to Limited Option Update
NextGEN Gallery <= 3.59.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
H2O vulnerable to Deserialization of Untrusted Data
Telegram Bot & Channel <= 3.8.2 - Cross-Site Request Forgery
Smartsupp – live chat, chatbots, AI and lead generation <= 3.6 - Cross-Site Request Forgery
VikRentCar Car Rental Management System <= 1.3.1 - Cross-Site Request Forgery
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload
ProcessWire Cross Site Request Forgery vulnerability
Automad arbitrary file upload vulnerability
SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter
Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update
Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download
Apache CXF: SSRF vulnerability via WADL stylesheet parameter
Apache CXF allows unrestricted memory consumption in CXF HTTP clients
Apache CXF Denial of Service vulnerability in JOSE
Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update
WP eStore <= 8.5.5 - Cross-Site Request Forgery to Settings Reset
CTX Feed <= 6.5.6 - Authenticated (Shop Manager+) Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.