Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Checkout Field Editor <= 1.7.4 - Cross-Site Request Forgery to Checkout Fields Update
Checkout Field Editor (Premium) < 1.7.5 - Cross-Site Request Forgery
WooCommerce <= 7.8.2 - Sensitive Information Exposure
Read More & Accordion <= 3.2.6.1 - Authenticated (Administrator+) PHP Object Injection
Crayon Syntax Highlighter <= 2.8.4 - Authenticated (Contributor+) Server Side Request Forgery
SocialDriver < 2024 - Prototype Pollution
WooCommerce Subscription < 4.6.0 - Cross-Site Request Forgery
Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode
Modula <= 2.7.4 - Incomplete Authorization via 'save_image' and 'save_images'
Zotpress <= 7.3.4 - Reflected Cross-Site Scripting via 'PHP_SELF'
hutool Buffer Overflow vulnerability
hutool Buffer Overflow vulnerability
hutool Buffer Overflow vulnerability
Cockpit CMS arbitrary file upload vulnerability
ProfilePress <= 4.13.1 Cross-Site Request Forgery via 'admin_notice'
ProfilePress <= 4.13.1 - Limited Privilege Escalation via 'acceptable_defined_roles'
Educare <= 1.4.6 - Missing Authorization to Sensitive Information Exposure
Jeecg boot arbitrary file read vulnerability
Jeecg boot SQL Injection vulnerability
Hexo `include_code` has a path traversal
Snappy PHAR deserialization vulnerability
Buttercup allows attackers to obtain the hash of the master password
WP Crowdfunding <= 2.1.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.