Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Unauthorized npm publish of cline@2.3.0 with modified postinstall script
changedetection.io is vulnerable to unauthenticated static path traversal
Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Weblate has an argument injection in management console
Greenly Theme Addons < 8.2 - Authenticated (Contributor+) Local File Inclusion
Extra Fees Plugin for WooCommerce <= 4.3.3 - Cross-Site Request Forgery
LabtechCO <= 8.3 - Authenticated (Contributor+) Local File Inclusion
URL Shortify <= 1.12.3 - Authenticated (Author+) Server-Side Request Forgery
Nanosoft < 1.3.2 - Missing Authorization
Download Manager <= 3.3.52 - Missing Authorization
Checkout for PayPal <= 1.0.46 - Missing Authorization
Greenly <= 8.1 - Authenticated (Contributor+) Local File Inclusion
Ally <= 4.0.2 - Missing Authorization
MK Google Directions <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Court Reservation <= 1.10.11 - Missing Authorization
Emphires <= 3.9 - Authenticated (Contributor+) Local File Inclusion
GLB <= 1.2.2 - Missing Authorization
WP-Lister Lite for eBay <= 3.8.5 - Missing Authorization
Nelio AB Testing <= 8.2.4 - Authenticated (Editor+) SQL Injection
Video Conferencing with Zoom < 4.6.6 - Missing Authorization
Visual Link Preview <= 2.3.0 - Authenticated (Contributor+) Server-Side Request Forgery
ShipTime: Discounted Shipping Rates <= 1.1.4 - Missing Authorization
iZooto <= 3.7.20 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.