Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Image Source Control <= 2.29.0 - Reflected Cross-Site Scripting
Flexible PDF Coupons <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ksher <= 1.1.2 - Missing Authorization
MDJM Event Management <= 1.7.5.6 - Reflected Cross-Site Scripting
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress <= 2.2.1 - Missing Authorization
Smart Manager <= 8.52.0 - Authenticated (Administrator+) SQL Injection
MailChimp Subscribe Forms <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Passwords Manager <= 1.4.8 - Missing Authorization to Authenticated (Subscriber+) Add Password + Update Encryption Key
Admin and Customer Messages After Order for WooCommerce <= 13.2 - Authenticated (Subscriber+) Limited File Upload to Cross-Site Scripting
Verge3D <= 4.8.0 - Reflected Cross-Site Scripting
VikAppointments Services Booking Calendar <= 1.2.16 - Cross-Site Request Forgery
Chamber Dashboard Business Directory <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
My Tickets <= 2.0.9 - Missing Authorization
Taskbuilder <= 3.0.6 - Authenticated (Subscriber+) SQL Injection
Social Pug: Author Box <= 1.0.0 - Reflected Cross-Site Scripting
WP Responsive Tabs <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Custom WP Store Locator <= 1.4.7 - Reflected Cross-Site SCripting
My auctions allegro <= 3.6.18 - Reflected Cross-Site Scripting
Contact Form With Shortcode <= 4.2.5 - Reflected Cross-Site Scripting
FAT Event Lite <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Realtyna Provisioning <= 1.2.2 - Reflected Cross-Site Scripting
Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message
Silverstripe Framework has a XSS in form messages
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.