Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
API Platform Core does not call GraphQl securityAfterResolver
AWS CDK CodePipeline: trusted entities are too broad
yiisoft Yii2 Deserialization of Untrusted Data
GetmeUK ContentTools Cross-Site Scripting (XSS)
Yummly Rich Recipes <= 4.2 - Cross-Site Request Forgery
User Registration & Membership <= 4.1.1 - Unauthenticated Privilege Escalation
Auto Load Next Post <= 1.5.14 - Cross-Site Request Forgery
WordPres 同步微博 <= 1.1.0 - Cross-Site Request Forgery
Teleport <= 1.2.4 - Reflected Cross-Site Scripting
StoreBiz <= 1.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cazamba <= 1.2 - Reflected Cross-Site Scripting
Mobile Navigation <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Super Static Cache <= 3.3.5 - Cross-Site Request Forgery
Pretty file links <= 0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Parallax Content Slider <= 0.9.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fiverr.com Official Search Box <= 1.0.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
WP Odoo Form Integrator <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Whitish Lite <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
NextGEN Gallery Voting <= 2.7.6 - Reflected Cross-Site Scripting
AvaiBook <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Clink <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Super Simple Subscriptions <= 1.1.0 - Authenticated (Administrator+) SQL Injection
Shuffle <= 0.5 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.