Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 391
Reset filtersYOP Poll <= 6.1.1 - Reflected Cross-Site Scripting
WordPress Core < 5.2.4 - Server Side Request Forgery
UserPro <= 4.9.34 - Reflected Cross-Site Scripting
UserPro <= 4.9.20 - Privilege Escalation
Easy Custom Auto Excerpt < 2.4.7 - Stored Cross-Site Scripting
UserPro <= 4.9.27 - Privilege Escalation
UserPro <= 4.9.23 - Unauthenticated Cross-Site Scripting
UserPro <= 4.9.17 - Authentication Bypass
Easy Testimonials <= 3.0.4 - Cross-Site Scripting
WordPress Core < 4.7.2 - Cross-Site Scripting
PPOM for WooCommerce <= 1.1 - Arbitrary File Upload
A vulnerability in the PPOM for WooCommerce plugin allows unauthenticated attackers to upload arbitrary files due to missing file type validation, potentially leading to remote code execution.
SupportFlow <= 0.6 - Cross-Site Scripting via a ticket excerpt.
Lingotek Translation <= 1.1.8 - Cross-Site Scripting
PowerPress <= 6.0.4 - Reflected Cross-Site Scripting
Powerplay Gallery <= 3.3 - Arbitrary File Upload
Powerplay Gallery <= 3.3 - Arbitrary File Upload
Powerplay Gallery <= 3.3 - SQL Injection
Husker Portfolio <= 0.3 - Arbitrary File Upload
WonderPlugin Audio Player < 2.1 - Multiple Cross-Site Scripting
WonderPlugin Audio Player <= 2.0 - Blind SQL Injection
PowerPress <= 6.0.0 - Cross-Site Scripting
iTwitter <= 0.04 - Cross-Site Scripting
Count Per Day <= 3.1.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.