Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Klarna Checkout for WooCommerce <= 2.0.9 - Arbitrary Plugin Installation, Activation and Deactivation
confinit vulnerable to prototype pollution
Prototype pollution in class-transformer
WP Lead Plus X <= 0.99 - Cross-Site Request Forgery
WP Lead Plus X <= 0.98 - Stored Cross-Site Scripting
WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X <= 0.98 - Authenticated Stored Cross-Site Scripting
Car Rental System <= 1.3 - Unauthenticated Stored Cross-Site Scripting
Vanguard - Marketplace Digital Products PHP7 <= 2.1 - Cross-Site Scripting
Online Hotel Booking System Pro <= 1.1 - Cross-Site Scripting
Regular Expression Denial of Service in Acorn
Prototype Pollution in minimist
Improper Neutralization of CRLF Sequences in HTTP Headers in Jooby ('HTTP Response Splitting)
hwdplayer - SQL Injection
OneTone <= 3.0.6 & OneTone Companion <= 1.1.1 - Stored Cross-Site Scripting
OneTone <= 3.0.6 & OneTone Companion <= 1.1.1 - Unauthenticated Settings Update
WP Last Modified Info <= 1.6.5 - Stored Cross-Site Scripting
fabrik - Various
GMapFP - Other
WooCommerce Subscriptions <= 3.0.2 - Cross-Site Request Forgery
Contact Form 7 Datepicker <= 2.6.0 - Authenticated Stored Cross-Site Scripting
Cross-Site Scripting in seeftl
Cross-Site Scripting in fileview
XSS in MITREid Connect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.