Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
WordPress Membership SwiftCloud.io <= 1.0 - Authenticated (Admin+) SQL Injection
Cashtomer <= 1.0.0 - Authenticated (Admin+) SQL Injection
Comment Highlighter <= 0.13 - Authenticated (Admin+) SQL Injection
Simple Post <= 1.1 - Stored Cross-Site Scripting
Easy Testimonial Manager <= 1.2.0 - Authenticated (Admin+) SQL Injection
WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 <= 3.7.2 - Authenticated (Admin+) SQL Injection
Denial of Service in SheetJS Pro
Denial of Service in SheetsJS Pro
Denial of Service in SheetJS Pro
Privilege escalation: all users can access Admin-level API keys
Cross-Site Scripting in Backend Grid View
Cross-Site Scripting in Query Generator & Query View
Cross-Site Scripting in Page Preview
WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion
drupal/form_mode_manager - SA-CONTRIB-2021-023
Drupal core - SA-CORE-2021-004
SendGrid <= 1.11.8 - Authorization Bypass
Charitable – Donation Plugin <= 1.6.50 - Unauthenticated Stored Cross-Site Scripting
NewsPlugin <= 1.0.18 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Grid Gallery – Photo Image Grid Gallery <= 1.2.4 - Stored Cross-Site Scripting
Maintenance <= 4.02 - Authenticated Stored Cross-Site Scripting
Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting
Charitable – Donation Plugin <= 1.6.50 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.