Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Simple Quotation <= 1.3.2 - SQL injection
Login with phone number <= 1.3.6 - Unauthenticated Remote Plugin Deletion
WP Statistics <= 13.1.5 - Unauthenticated Blind SQL Injection via current_page_type
Session Fixation in WildFly Elytron
Incorrect Authorization in WildFly Elytron
Wildfly logs plaintext passwords
Improper Input Validation in Xerces
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
Cross-site Scripting in pimcore
Exposure of Sensitive Information in snipe/snipe-it
Path Traversal in ImpressCMS
Cross-site Scripting in librenms
Cross-site Scripting in librenms
Authorization bypass in url-parse
Improper Privilege Management in Snipe-IT
Persian WooCommerce <= 5.8.0 - Reflected Cross-Site Scripting
Photo Gallery by 10Web <= 1.5.87 - Unauthenticated SQL Injection via bwg_tag_id_bwg_thumbnails_0 Parameter
Relevanssi – A Better Search < 4.14.6 & Relevanssi – A Better Search Pro < 2.16.5 - Missing Authorization
Advanced Product Labels for WooCommerce <= 1.2.3.6 - Reflected Cross-Site Scripting
SVG Support <= 2.5.8 - Stored Cross-Site Scripting via Vulnerability Dependency
UsersWP <= 1.2.3 - Subscriber+ User Avatar Override
Multiple Themes (Various Versions) - Reflected Cross-Site Scripting
WP Visitor Statistics (Real Time Traffic) <= 5.5 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.