Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Code Embed <= 2.3.6 - Authenticated(Contributor+) Denial of Service
CSV Importer <= 0.3.8 - Cross-Site Request Forgery
WOOCS – WooCommerce Currency Switcher <= 1.4.1.4 - Cross-Site Request Forgery via delete_profiles_data
WooCommerce Payments <= 6.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Spectra <= 2.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
RegistrationMagic <= 5.2.3.0 - Missing Authorization
LiveChat <= 4.5.15 - Cross-Site Request Forgery
Structured Content <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection
Product Catalog Feed by PixelYourSite <= 2.1.1 - Cross-Site Request Forgery
WappPress <= 5.0.3 - Unauthenticated Arbitrary File Upload
Fix My Feed RSS Repair <= 1.4 - Cross-Site Request Forgery
WP Photo Album Plus <= 8.5.02.005 - IP Spoofing
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
jupyter-server errors include tracebacks with path information
Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download
Solon is vulnerable to Deserialization of Untrusted Data
ThinkAdmin arbitrary file upload vulnerability
Logging of the firestore key within nodejs-firestore
Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data
Awesome Support <= 6.1.10 - Missing Authorization
CSprite <= 1.1 - Cross-Site Request Forgery
Product Enquiry for WooCommerce <= 3.0 - Cross-Site Request Forgery
Adifier System < 3.1.4 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.