Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersMoodle allows unauthenticated REST API user data exposure
Moodle self enrollment available before completing second factor with MFA enabled
Craft CMS Allows Remote Code Execution
drupal/search_api_solr - SA-CONTRIB-2025-046
drupal/ueditor - SA-CONTRIB-2025-044
drupal/block_class - SA-CONTRIB-2025-043
drupal/bootstrap_site_alert - SA-CONTRIB-2025-042
drupal/colorbox - SA-CONTRIB-2025-041
Laravel Starter Cross Site Scripting (XSS)
croogo Host header injection
PEAR HTTP_Request2 vulnerable to Cross-site Scripting
drupal/d8_google_optimize_hide_page - SA-CONTRIB-2025-040
drupal/google_optimize - SA-CONTRIB-2025-039
drupal/gmap_store_locator - SA-CONTRIB-2025-038
drupal/simple_gtm - SA-CONTRIB-2025-037
drupal/panelizer - SA-CONTRIB-2025-036
drupal/stage_file_proxy - SA-CONTRIB-2025-035
drupal/baguettebox - SA-CONTRIB-2025-034
DevDojo Voyager Argument Injection vulnerability
Formie has XSS vulnerability for email notification content for preview
Formie has XSS vulnerability for importing forms
Yii does not prevent XSS in scenarios where fallback error renderer is used
Silverstripe Framework user enumeration via timing attack on login and password reset forms
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.