Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Simple Business Data <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
This-or-That by André Boekhorst <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
JB News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Restaurant Listings <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Thumbnail <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Playerzbr <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Meta Field
Email Tracker <= 5.3.15 - Authenticated (Admin+) SQL Injection
ST Categories Widget <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Force Images Download <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP AD Gallery <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Responsive Progress Bar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
uv has differential in tar extraction with PAX headers
Liferay Portal fails to verify messages from the cluster network is trusted
ProcessWire CMS vulnerable to resource-exhaustion Denial of Service
Shopware Customer Orders can be canceled, even if refunds are disabled
Shopware exposes sensitive user information via CSV export mapping
Shopware vulnerable to Server-Side Request Forgery (SSRF) – order invoice
Shopware vulnerable to path traversal via Plugin upload
Shopware vulnerable to MediaVisibilityRestrictionSubscriber bypass when reading media entities by aggregating fields individually
Flexible Refund and Return Order for WooCommerce <= 1.0.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Refund
PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification
Simple Banner <= 3.0.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.