Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 93
Reset filtersJetpack CRM <= 5.3.1 - Cross-Site Request Forgery and PHAR Deserialization
Jetpack CRM <= 5.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Booster (<= 6.0.0), Booster Plus (<= 6.0.0), and Booster Elite (<= 6.0.0) for WooCommerce - Cross-Site Request Forgery
Jetpack CRM <= 5.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Booster (<= 5.6.2), Booster Plus (< 6.0.0), and Booster Elite (< 6.0.0) for WooCommerce - Reflected Cross-Site Scripting
Booster for WooCommerce <= 5.6.8 - Cross-Site Request Forgery
Jetpack CRM <= 5.4.2 - Authenticated (Administrator+) Cross-Site Scripting
Booster (<= 5.6.6), Booster Plus (<= 5.6.5), and Booster Elite (<= 1.1.7) for WooCommerce - Cross-Site Request Forgery leading to Arbitrary Custom Role Creation/Deletion
Booster Elite for WooCommerce < 1.1.7 - Cross-Site Request Forgery
Booster Elite for WooCommerce < 1.1.7 - Authenticated (Admin/Shop Manager+) Arbitrary File Download
Booster for WooCommerce <= 5.6.6 - Cross-Site Request Forgery
Booster for WooCommerce (Free <= 5.6.2 and Premium <= 5.6.0) - Authenticated (Subscriber+) Order Modification
Booster for WooCommerce <= 5.6.1 - Cross-Site Request Forgery
Booster for WooCommerce <= 5.5.9 - Reflected Cross-Site Scripting
Booster for WooCommerce <= 5.5.8 - Reflected Cross-Site Scripting
All in One SEO 4.1.3.1 - 4.1.5.2 - Authenticated SQL Injection
All in One SEO 4.0.0 - 4.1.5.2 Authorization Bypass
Booster for WooCommerce <= 5.4.8 - Reflected Cross-Site Scripting in General Module
Booster for WooCommerce <= 5.4.8 - Reflected Cross-Site Scripting in PDF Invoicing Module
Booster for WooCommerce <= 5.4.8 - Reflected Cross-Site Scripting in Product XML Feeds Module
Booster for WooCommerce <= 5.4.3 - Authentication Bypass
JetPack <= 9.7 - Information Disclosure
Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.