Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Liferay Portal has stored cross-site scripting (XSS) vulnerability
Email Template Customizer for WooCommerce <= 1.2.17 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install
Atarim <= 4.2.1 - Unauthenticated Information Exposure
Ultimate Addons for Elementor Lite <= 2.4.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Businext < 2.4.4 - Unauthenticated Local File Inclusion
Responsive Lightbox & Gallery <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting
WPLMS <= 1.9.9.8 - Reflected Cross-Site Scripting
WPLMS <= 1.9.9.7 - Missing Authorization
Grid Plus <= 3.3 - Reflected Cross-Site Scripting
Liferay Portal's System, Instance and Site Settings are vulnerable to Open Redirect
Liferay Portal: Missing Rate Limiting in GraphQL Endpoint Enables Resource Exhaustion Attack
Hono has Body Limit Middleware Bypass
Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover
Liferay Portal's selection modal is vulnerable to XSS
The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Authenticated (Administrator+) Arbitrary File Deletion
Liferay Portal's Organization Selector exposes organization data to remote authenticated users
Liferay Portal JSON Web Services Direct Class Invocation Enables Service Access Policy Execution
Fidelo Snippet <= 1.12 - Reflected Cross-Site Scripting
ListingPro < 2.9.10 - Missing Authorization
Multiple Plugins and Themes by inkthemes <= 1.1.8 - Unauthenticated Information Exposure
ListingPro < 2.9.10 - Reflected Cross-Site Scripting
ListingPro < 2.9.10 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.