Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
MasterStudy LMS <= 3.6.20 - Authenticated (Subscriber+) Race Condition to Multiple Reviews
WooCommerce Additional Fees On Checkout (Free) <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Penci Portfolio <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Save as PDF <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
E-namad & Shamed Logo Manager <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'
WPB Quick View for WooCommerce <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wp tabber widget <= 4.0 - Authenticated (Contributor+) SQL Injection
Penci Podcast <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
VikRestaurants Table Reservations and Take-Away <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Zoho Flow <= 2.14.1 - Cross-Site Request Forgery
Auction Feed <= 1.1.3 - Cross-Site Request Forgery
Custom Post Type Images <= 0.5 - Cross-Site Request Forgery
GetResponse Forms <= 2.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Page-list <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
wpDiscuz <= 7.6.33 - Missing Authorization
Helpie FAQ <= 1.45 - Unauthenticated Sensitive Information Exposure
Pinterest Pinboard Widget <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CardCom Payment Gateway <= 3.5.0.4 - Missing Authorization
Qubely <= 1.8.14 - Missing Authorization
IP Based Login <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
All In One SEO Pack <= 4.8.7.1 - Missing Authorization
Show Pages List <= 1.2.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.