Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersMainWP <= 4.4.3.3 - Authenticated (Administrator+) SQL Injection
Microweber Cross-site Scripting vulnerability
PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block
drupal/graphql - SA-CONTRIB-2023-051
drupal/graphql - SA-CONTRIB-2023-050
Magnesium-PHP Injection vulnerability
Ibexa ezplatform-kernel download route allows filename change
Ibexa DXP Download route allows filename change
Json response for search reveals Solr credentials
Json response for search reveals Solr credentials
Download route allows filename change in eZpublish kernel
Subrion remote command execution vulnerability
FoodCoopShop Server-Side Request Forgery vulnerability
Reportico Cross-site Scripting vulnerability
phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scripting
drupal/paragraphs_admin - SA-CONTRIB-2023-049
Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews
Dolibarr Improper Input Validation vulnerability
Dolibarr Improper Input Validation vulnerability
pimcore/admin-ui-classic-bundle Unverified Password Change
Pimcore Cross-site Scripting vulnerability
Insufficient Session Expiration in thorsten/phpmyfaq
phpMyFAQ Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.