Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 13
Reset filtersUltimate Product Catalogue <= 5.2.15 - Cross-Site Request Forgery via reset_settings()
Ultimate Product Catalog <= 5.2.5 - Authenticated(Administrator+) Stored Cross-Site Scripting
Ultimate Product Catalog – WordPress Catalog Plugin <= 5.0.25 - Cross-Site Request Forgery
Ultimate Product Catalog <= 4.2.21 - Authorization Bypass and Cross-Site Request Forgery
Ultimate Product Catalog <= 4.2.11 - Cross-Site Scripting
Ultimate Product Catalog <= 4.2.22 - SQL Injection
Ultimate Product Catalog < 4.2.3 - Authenticated SQL Injection
Ultimate Product Catalog <= 3.8.1 - Missing Authorization to Plugin Settings Update
Ultimate Product Catalogue < 3.1.3 - SQL Injection
Ultimate Product Catalog < 4.2.22 - Arbitrary File Upload
Ultimate Product Catalog < 3.1.3 - Multiple Vulnerabilities
Ultimate Product Catalog < 2.1.1 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.