Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Spring Boot has an Authentication Bypass under Actuator Health groups paths
Spring Framework Improper Path Limitation with Script View Templates
Pendulum < 3.1.5 - Authenticated (Subscriber+) PHP Object Injection
WooCommerce Support Ticket System < 18.5 - Unauthenticated Arbitrary File Deletion
Product Rearrange for WooCommerce <= 1.2.2 - Missing Authorization
Taboola Pixel <= 1.1.4 - Reflected Cross-Site Scripting
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 7.7.9 - Unauthenticated SQL Injection
Kunco < 1.4.5 - Unauthenticated Local File Inclusion
Jaroti < 1.4.8 - Reflected Cross-Site Scripting
Avada (Fusion) Builder < 3.15.0 - Reflected Cross-Site Scripting
MyMedi < 1.7.7 - Reflected Cross-Site Scripting
Kargo Takip < 0.2.4 - Missing Authorization
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.6 - Missing Authorization
WP Custom Admin Interface <= 7.42 - Authenticated (Subscriber+) Stored Cross-Site Scripting
VintWood <= 1.1.8 - Unauthenticated Local File Inclusion
MetaMax <= 1.1.4 - Unauthenticated Local File Inclusion
Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) SQL Injection
IdealAuto < 3.8.6 - Unauthenticated Local File Inclusion
Miti < 1.5.3 - Reflected Cross-Site Scripting
Riode | Multi-Purpose WooCommerce < 1.6.29 - Reflected Cross-Site Scripting
Motta Addons < 1.6.1 - Reflected Cross-Site Scripting
RepairBuddy <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.