Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
User Avatar <= 1.4.11 - Reflected Cross-Site Scripting
All In One WP Security <= 5.2.4 - Protection Bypass of Renamed Login Page via URL Encoding
WP Word Count <= 3.2.4 - Missing Authorization via calculate_statistics
Download CloudNet360 <= 3.2.0 - Reflected Cross-Site Scripting
Remove Add to Cart WooCommerce <= 1.4.4 - Cross-Site Request Forgery to Settings Modification
Medialist <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Autolinks Manager <= 1.10.04 - Cross-Site Request Forgery
SAHU TikTok Pixel for E-Commerce <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Simple HTML Sitemap <= 2.2 - Reflected Cross-Site Scripting via id
kk Star Ratings <= 5.4.5 - Missing Authorization
Custom Header Images <= 1.2.1 - Cross-Site Request Forgery
Admin and Site Enhancements (ASE) <= 5.7.1 - Password Protection Mode Security Feature Bypass
VK Filter Search <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Improper neutralization of SQL parameter in tvcmsblog module by themevolty for PrestaShop
Improper neutralization of SQL parameter in Opart limit quantity for PrestaShop
Improper Neutralization of Special Elements used in an OS Command in the Franfinance module for PrestaShop
WPS Server Side Request Forgery vulnerability
Unsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF
sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)
RabbitMQ Java client's Lack of Message Size Limitation leads to Remote DoS Attack
Parse Server may crash when uploading file without extension
Concrete CMS Cross-site Scripting vulnerability
WP iCal Availability <= 1.0.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.