Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Rock Convert <= 2.11.0 - Authenticated (Admin+) Stored Cross-Site Scripting
WooCommerce Products Vendor <= 2.1.68 - Insecure Direct Object Reference to Vendor Commission Percentage Update
WP Humans.txt <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
WooCommerce Products Vendor <= 2.1.65 - Insecure Direct Object Reference to Note Creation
Table Generator <= 1.3.0 - Missing Authorization to Table Modification
FontMeister <= 1.08 - Reflected Cross-Site Scripting
LIEF vulnerable to denial of service through segmentation fault
Uncontrolled Resource Consumption in Jackson-databind
Uncontrolled Resource Consumption in FasterXML jackson-databind
LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection
Casso – Tự động xác nhận thanh toán chuyển khoản ngân hàng <= 2.8.6 - Authenticated (Admin+) Cross-Site Scripting
WP ALL Export Pro <= 1.7.8 - Authenticated SQL Injection
WP ALL Export Pro <= 1.7.8 - Authenticated Remote Code Execution
Bricks 1.0 - 1.5.3 - Missing Authorization to Arbitrary Content Creation/Modification
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) SQL Injection
Retain Live Chat <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
BuddyForms Moderation <= 1.4.16 - Authenticated Stored Cross-Site Scripting
WP Super Cache <= 1.8 - Unauthenticated Cache Poisoning
Related Posts for WordPress <= 2.1.1 - Reflected Cross-Site Scripting
Post to CSV by BestWebSoft <= 1.3.8 - Authenticated (Author+) CSV Injection
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Bricks 1.2 - 1.5.3 - Remote Code Execution
AntiSpam by CleanTalk <= 5.185 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.