Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
Custom Field Template <= 2.5.7 - Authenticated (Administrator+) PHP Object Injection
WP-Lister Lite for Amazon <= 2.4.2 - Reflected Cross-Site Scripting
Visual Email Designer for WooCommerce <= 1.7.1 - Authenticated (Author+) SQL Injection
Cross-site scripting vulnerability in TinyMCE alerts
PrestaShop has potential Information exposure in the upload directory
Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List
Mingsoft MCMS vulnerable to Cross-site Scripting
RuoYi-Cloud Cross-site Scripting vulnerability
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.10 - Authenticated (Admin+) Cross-Site Scripting
Joy Of Text Lite – SMS messaging for WordPress <= 2.3.0 - Unauthenticated SQL Injection
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection
White Label CMS <= 2.4 - Authenticated (Administrator+) PHP Object Injection
Wholesale Market for WooCommerce <= 2.0.0 & Wholesale Market <= 2.2.1 - Cross-Site Request Forgery
Moosend Website Connector <= 1.0.189 - Missing Authorization
Product list Widget for Woocommerce <= 1.0 - Reflected Cross-Site Scripting
libp2p DoS vulnerability from lack of resource management
Certifi removing TrustCor root certificate
PaddlePaddle vulnerable to Code Injection
baserCMS vulnerable to stored Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.