Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Universal Star Rating <= 1.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Sunshine Photo Cart <= 2.9.14 - Reflected Cross-Site Scripting
phpMyFAQ vulnerable to Cross-site Scripting
phpMyFAQ vulnerable to Cross-site Scripting
phpMyFAQ has insecure HTTP cookies
Image Hover Effects Ultimate 9.8.1 - 9.8.4 - Authenticated (Admin+) Stored Cross-Site Scripting
demon image annotation <= 5.0 - Improper Input Restriction Validation
Sentry vulnerable to invite code reuse via cookie manipulation
Yii2 Gii Cross-site Scripting vulnerability
Spring Boot Admins integrated notifier support allows arbitrary code execution
Akeneo PIM Community Edition vulnerable to remote php code execution
Mingsoft MCMS vulnerable to SQL Injection
Clearpay Gateway for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting
Woocommerce Vietnam Checkout <= 2.0.4 - Reflected Cross-Site Scripting
Product Reviews Import Export for WooCommerce <= 1.4.8 - CSV Injection
All-In-One Security <= 5.1.2 - Information Disclosure
Image Optimizer, Resizer and CDN – Sirv <= 6.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Team Members <= 5.2.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Afterpay Gateway for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting
Cryptocurrency Widgets Pack <= 2.0 - Unauthenticated SQL Injection
Superio - Job Board <= 1.2.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting
LetsRecover <= 1.1.0 - Authenticated (Admin+) SQL Injection
WP User <= 7.0 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.