Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Vega allows Cross-site Scripting via the vlSelectionTuples function
Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution
Apache Ignite: Possible RCE when deserializing incoming messages by the server node
DOMPurify allows Cross-site Scripting (XSS)
Badgearoo <= 1.0.14 - Reflected Cross-Site Scripting
SKT Blocks <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
sidebarTabs <= 3.1 - Reflected Cross-Site Scripting
Distance Based Shipping Calculator <= 2.0.22 - Missing Authorization
Gallery <= 2.2.1 - Authenticated (Author+) Stored Cross-Site Scripting
DL Leadback <= 1.2.1 - Reflected Cross-Site Scripting
Keep Backup Daily <= 2.1.0 - Authenticated (Admin+) Arbitrary File Download
Content Snippet Manager <= 1.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Magic the Gathering Card Tooltips <= 3.5.0 - Unauthenticated Stored Cross-Site Scripting
Responsive Modal Builder for High Conversion – Easy Popups <= 1.5.0 - Reflected Cross-Site Scripting
Vertex Addons for Elementor <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Distance Based Shipping Calculator <= 2.0.22 - Missing Authorization to Unauthenticated Settings Update
Analytify <= 5.5.0 - Missing Authorization
RTMKit <= 1.6.7 - Authenticated (Contributor+) Insecure Direct Object Reference
what3words Address Field <= 4.0.15 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Email Keep <= 1.1 - Reflected Cross-Site Scripting
Spotlight Social Media Feeds <= 1.7.1 - Unauthenticated Sensitive Information Disclosure
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Read
LTL Freight Quotes – Estes Edition <= 3.3.7 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.