Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filtersPPOM for WooCommerce <= 1.1 - Arbitrary File Upload
A vulnerability in the PPOM for WooCommerce plugin allows unauthenticated attackers to upload arbitrary files due to missing file type validation, potentially leading to remote code execution.
Ajax Load More < 2.11.2 - Local File Inclusion
Add From Server <= 3.3.1 - Cross-Site Request Forgery
Adblocker Blocker <= 0.0.1 - Arbitrary File Upload
Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload
WP Fastest Cache <= 0.8.5.9 - Local File Inclusion
Easy Forms for Mailchimp < 6.1 - Local File Inclusion
WP Job Manager <= 1.26.1 - Arbitrary File Upload
SEO Plugin by Squirrly SEO < 6.1.5 - Directory Traversal
Ultimate Member <= 1.3.64 - Local File Inclusion
BePro Listings <= 2.2.0020 - Unauthenticated Arbitrary File Upload
Real3D Flipbook <= 1.0.0 - File Upload to User Controlled Location
Real3D Flipbook <= 2.8 - Directory Traversal via Uploads
WordPress File Upload < 3.9.0 - Arbitrary File Upload
Contus Video Comments <= 1.0 - Remote File Upload
WP Remote Upload <= 1.2.1 - Cross-Site Request Forgery to Arbitrary File Upload
Blaze Slide Show <= 2.7 - Arbitrary File upload
WP Mobile Detector <= 3.5 - Arbitrary File Upload
WP Fastest Cache <= 0.8.5.7 - Local File Inclusion
Nelio AB Testing < 4.5.0 - Directory Traversal
Tevolution < 2.3.0 - Arbitrary File Upload
Photo Gallery, Images, Slider in Rbs Image Gallery <= 2.0.14 - Remote Code Execution
IMDB Profile Widget < 1.0.9 - Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.