Critical
2fd58397-7598-4d98-a6b3-c5837cb3b73e
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
14c07d55-285b-4c7c-bed6-4c5224a7044a
Extra Charges To Payment Gateway For WooCommerce <= 2.0.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
121a3b46-0b31-4f28-b98e-fc06760548ae
Data Tables Generator by Supsystic <= 1.9.99 - Time-Based Blind SQL Injection
High
CVE-2020-36242
PyCA Cryptography symmetrically encrypting large values can lead to integer overflow
Medium
CVE-2022-1164
Wyzi - Social Directory WordPress Theme <= 2.4.2 - Reflected Cross-Site Scripting
High
CVE-2021-24150
Like Button Rating ♥ LikeBtn < 2.6.32 - Server-Side Request Forgery
Medium
CVE-2021-3189
Open redirect in Slashify
High
CVE-2020-28494
Command injection in total.js
High
CVE-2020-28495
Prototype pollution in total.js
Critical
CVE-2021-25912
Prototype pollution in dotty
Medium
CVE-2021-26722
LinkedIn Oncall vulnerable to Cross-Site Scripting
High
CVE-2021-20652
Name Directory <= 1.17.4 - Cross-Site Request Forgery
High
CVE-2021-4348
Ultimate GDPR & CCPA <= 2.4 - Unauthenticated Settings Import & Export
High
CVE-2021-24159
Contact Form 7 Style <= 3.1.9 Cross-Site Request Forgery
High
CVE-2020-11979
Code injection in Apache Ant
Medium
CVE-2021-25041
Photo Gallery <= 1.5.67 - Reflected Cross-Site Scripting
High
CVE-2021-21294
Unbounded connection acceptance in http4s-blaze-server
High
CVE-2021-21293
Unbounded connection acceptance leads to file handle exhaustion
Medium
CVE-2021-23980
Cross-site scripting in Bleach
High
ghsa-x7p5-p2c9-phvg
Unexpected database bindings
High
CVE-2021-21317
Denial of Service in uap-core
Medium
CVE-2021-3281
Django Directory Traversal via archive.extract
High
CVE-2021-26754
wpDataTables (Premium) <= 3.4 - SQL Injection
Medium
CVE-2021-24152
Popup Builder <= 3.73 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.