Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
My auctions allegro <= 3.6.18 - Reflected Cross-Site Scripting
Contact Form With Shortcode <= 4.2.5 - Reflected Cross-Site Scripting
FAT Event Lite <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Realtyna Provisioning <= 1.2.2 - Reflected Cross-Site Scripting
Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message
Silverstripe Framework has a XSS in form messages
Silverstripe Framework has a XSS via insert media remote file oembed
Lodestar snappy checksum issue
Lodestar snappy decompression issue
PDF for WPForms + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yeepdf_dotab Shortcode
Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation
Social proof testimonials and reviews by Repuso <= 5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability
Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length
Git Credential Manager carriage-return character in remote URL allows malicious repository to leak credentials
Gradio Blocked Path ACL Bypass Vulnerability
Django has a potential denial-of-service vulnerability in IPv6 validation
Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mediawiki - DataTransfer Extension Cross-Site Request Forgery (CSRF) and Cross-site Scripting (XSS)
Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.