Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Replace Word <= 2.1 - Cross-Site Request Forgery
Variation Swatches for WooCommerce <= 2.3.7 - Reflected Cross-Site Scripting
Zippy <= 1.6.2 - Missing Authorization via adminInit
Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints
User Activity Log <= 1.6.2 - Authenticated (Administrator+) SQL Injection
Media Library Assistant <= 3.07 - Reflected Cross-Site Scripting
KB Support <= 1.5.88 - Missing Authorization to Authenticated (Subscriber+) User Data Retrieval
Art Direction <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Checkout with Zelle on Woocommerce <= 3.1 - Missing Authorization
JC Dashboards - Other
quickform - Other
admirror gallery - XSS (Cross Site Scripting)
Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution
Vendure Cross Site Request Forgery vulnerability impacting all API requests
Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE).
WP tarteaucitron.js Self Hosted <= 1.2.4 - Running a Vulnerable Dependency
RealHomes <= 4.3.7 - Missing Authorization
RealHomes <= 4.3.7 - Missing Authorization
Exit Popups & Onsite Retargeting by OptiMonk <= 2.0.4 - Cross-Site Request Forgery
KB Support <= 1.5.88 - Missing Authorization to Sensitive Data Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.