Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
jSuites subect to Cross-site Scripting
Arigato Autoresponder and Newsletter <= 2.1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Beautiful Cookie Consent Banner <= 2.10.0 - Missing Authorization to Settings Update
GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection
WP Statistics <= 13.2.10 - Authenticated (Subscriber+) SQL Injection
Correos Oficial <= 1.3.0.0 - Unauthenticated Arbitrary File Download
Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting
Namaste! LMS <= 2.5.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Servst vulnerable to Path Traversal
Eta vulnerable to Code Injection via templates rendered with user-defined data
Froxlor contains Business Logic Errors
Froxlor contains Static Code Injection
Froxlor contains Unchecked Error Condition
GS Products Slider for WooCommerce <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GS Portfolio for Envato <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GS Filterable Portfolio <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
AI Contact Us Form <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
PrivateContent <= 8.4.3 - Protection Mechanism Bypass
Easy Digital Downloads <= 3.1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Robo Gallery Plugin <= 3.2.11 - Cross-Site Request Forgery
EmbedStories <= 0.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
BackupBuddy <= 8.8.2 - Reflected Cross-Site Scripting
WP Email Capture <= 3.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.