Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
WidgetPack Comment System <= 1.6.1 - Cross-Site Request Forgery
Page Blocks <= 1.1.0 - Cross-Site Request Forgery
WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection
WP Scraper <= 5.8.1 - Authenticated (Administrator+) Server-Side Request Forgery
Error Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read
Custom 404 Pro <= 3.12.0 - Authenticated (Administrator+) SQL Injection via `path` Parameter
WP Easy Toggles <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress Live Webcam Widget & Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Deletion
Code Quality Control Tool <= 2.1 - Unauthenticated Information Exposure via Log Files
Course Redirects for Learndash Plugin <= 0.4 - Cross-Site Request Forgery
Easy Plugin Stats <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injection
WPC Smart Wishlist for WooCommerce <= 5.0.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
Trinity Audio <= 5.21.0 - Unauthenticated Information Exposure
NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.6 - Authenticated (Admin+) SQL Injection
Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
PowerJob has Missing Authorization in its /user/list file
Liferay Portal is vulnerable to XSS through its workflow process builder
Liferay Portal's Membership page is vulnerable to XSS through “name“ text field
Liferay Portal Commerce is vulnerable to XSS through account "name" field
Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw
Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.