Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Bookit <= 2.6.0.4 - Authenticated (Bookit Staff+) Information Exposure
All Bootstrap Blocks 1.3.20 - 1.3.31 - Authenticated (Contributor+) Local File Inclusion
King Addons for Elementor <= 51.1.80 - Authenticated (Contributor+) Information Exposure
iGMS Direct Booking <= 1.0 - Unauthenticated Stored Cross-Site Scripting
Clean Login <= 1.18 - Unauthenticated CAPTCHA Bypass
Blog2Social: Social Media Auto Post & Scheduler <= 9.0.0 - Insecure Direct Object Reference
Bookit <= 2.6.0.4 - Missing Authorization
King Addons for Elementor 51.1.56 - 51.1.80 - Missing Authorization
Generate PDF using Contact Form 7 <= 4.2.1 - Unauthenticated Server-Side Request Forgery
Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQL Injection
Easy Appointments <= 4.0.2.1 - Missing Authorization
VikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored Cross-Site Scripting via SVG Upload
All-in-One WP Migration and Backup <= 7.110 - Authenticated (Admin+) Privilege Escalation
@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery
@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport
@zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS
Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE
Http4s: ResourceService and Webjar Service path escape via percent-encoded separators
Http4s Ember HTTP/2: unbounded continuation frame accumulation
Http4s: Ember chunk parser lenience (TE.TE request smuggling)
Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin
Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain
Http4s Ember HTTP/2 has an unbounded outbound frame queue
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.