Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersHostel <= 1.1.3 - Stored Cross-Site Scripting
Related YouTube Videos <= 1.9.8 - Cross-site Request Forgery
Hustle <= 6.0.7 - Unauthenticated CSV Injection
Simple File List <= 3.2.7 - Arbitrary File Download
Simple File List <= 3.2.4 - Arbitrary File Deletion
Event Management Tickets Booking By Event Monster Plugin < 1.0.6 - Cross-Site Scripting
Slimstat Analytics <= 4.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
W3 Total Cache <= 0.9.7.3 - Server Side Request Forgery
WP Booking System Free version < 1.5.2 - Cross-Site Request Forgery
User Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Arbitrary Options Update
WP Slimstat <= 4.8 - Unauthenticated Stored Cross-Site Scripting from Visitors
FV Flowplayer Video Player <= 7.3.13.727 - Unauthenticated Stored Cross-Site Scripting
FV Flowplayer Video Player <= 7.3.14.727 - SQL Injection
FV Flowplayer Video Player <= 7.3.14.727 - Sensitive Information Exposure
SAML Single Sign On – SAML SSO Login <= 4.8.75 - Cross-Site Request Forgery
Option Tree <= 2.7.2 - Object Injection Bypass
Option Tree <= 2.7.2 - Object Injection Bypass
Newsletter Manager <= 1.4 - Open Redirect
Woocommerce Products Price Bulk Edit <= 2.0 - Cross-Site Scripting via show_products_page_limit parameter
Live Chat with Messenger Customer Chat <= 1.4.6 - Unauthenticated Stored Cross-Site Scripting
FV Flowplayer Video Player <= 7.3.14.727 - Unauthenticated SQL Injection
FV Flowplayer Video Player <= 7.3.14.727 - Sensitive Data Exposure
Toggle The Title <= 1.4 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.