Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Simple File List <= 3.2.7 - Arbitrary File Download
Simple File List <= 3.2.4 - Arbitrary File Deletion
Event Management Tickets Booking By Event Monster Plugin < 1.0.6 - Cross-Site Scripting
drupal/menu_item_extras - SA-CONTRIB-2019-050
Slimstat Analytics <= 4.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
W3 Total Cache <= 0.9.7.3 - Server Side Request Forgery
WP Booking System Free version < 1.5.2 - Cross-Site Request Forgery
User Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Arbitrary Options Update
WP Slimstat <= 4.8 - Unauthenticated Stored Cross-Site Scripting from Visitors
FV Flowplayer Video Player <= 7.3.13.727 - Unauthenticated Stored Cross-Site Scripting
FV Flowplayer Video Player <= 7.3.14.727 - SQL Injection
FV Flowplayer Video Player <= 7.3.14.727 - Sensitive Information Exposure
SAML Single Sign On – SAML SSO Login <= 4.8.75 - Cross-Site Request Forgery
eXtplorer
Option Tree <= 2.7.2 - Object Injection Bypass
Option Tree <= 2.7.2 - Object Injection Bypass
Newsletter Manager <= 1.4 - Open Redirect
Woocommerce Products Price Bulk Edit <= 2.0 - Cross-Site Scripting via show_products_page_limit parameter
Live Chat with Messenger Customer Chat <= 1.4.6 - Unauthenticated Stored Cross-Site Scripting
FV Flowplayer Video Player <= 7.3.14.727 - Unauthenticated SQL Injection
FV Flowplayer Video Player <= 7.3.14.727 - Sensitive Data Exposure
Toggle The Title <= 1.4 - Cross-Site Scripting
drupal/multiple_registration - SA-CONTRIB-2019-048
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.