Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Nexter Extension <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Contact Form Email <= 1.3.60 - Unauthenticated Insecure Direct Object Reference
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action
Skuul School Management System has a Sensitive Data Exposure Vulnerability in Uploaded Images
yungifez Skuul School Management System vulnerable to XSS via SVG
Tryton sao allows XSS because it does not escape completion values
Tryton sao allows XSS via an HTML attachment
LearnPress <= 4.2.9.4 - Missing Authorization
Quiz And Survey Master <= 10.3.2 - Missing Authorization
WpEvently <= 5.0.4 - Missing Authorization
CatFolders <= 2.5.3 - Missing Authorization
Payment Gateway for PayPal on WooCommerce <= 9.0.53 - Missing Authorization
Trade Runner <= 3.14 - Cross-Site Request Forgery
WerkStatt <= 1.6.6 - Authenticated (Contributor+) Local File Inclusion
Stylish Price List <= 7.2.2 - Missing Authorization
Cart Weight for WooCommerce <= 1.9.11 - Missing Authorization
Masteriyo - LMS <= 2.0.3 - Authenticated (Subscriber+) Sensitive Information Exposure
Tutor LMS Elementor Addons <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
SiteGround Security <= 1.5.8 - Missing Authorization
Rencontre <= 3.13.7 - Cross-Site Request Forgery
StreamTube Core <= 4.78 - Unauthenticated Arbitrary User Password Change
JetFormBuilder <= 3.5.3 - Missing Authorization
Compress for MainWP <= 6.50.07 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.