Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
moodle: IDOR when fetching report schedules
moodle: IDOR in edit/delete RSS feed
Moodle leaks user names
moodle: Some users can delete audiences of other reports
Firebase JavaScript SDK allows attackers to manipulate the "_authTokenSyncURL" to point to their own server
django CMS Cross-Site Scripting (XSS)
Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File
Spring MVC controller vulnerable to a DoS attack
Chameleoni Jobs <= 2.5.4 - Reflected Cross-Site Scripting
LGPD Framework <= 2.0.2 - Reflected Cross-Site Scripting
QRMenu Restaurant QR Menu Lite <= 1.0.3 - Authenticated (Contributor+) PHP Object Injection
Awesome Studio <= 2.4.4 - Reflected Cross-Site Scripting
Fluent Forms <= 5.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
HTML5 Lyrics Karaoke Player <= 2.4 - Reflected Cross-Site Scripting
Opal Woo Custom Product Variation <= 1.1.3 - Unauthenticated Arbitrary File Deletion
Post Ideas <= 2 - Unauthenticated SQL Injection
GoQMieruca <= 1.0.0 - Reflected Cross-Site Scripting
Jobify - Job Board WordPress Theme < 4.3.0 - Cross-Site Request Forgery
Geolocator <= 1.1 - Unauthenticated PHP Object Injection
TM Islamic Helper <= 1.0.1 - Reflected Cross-Site Scripting
GoQSmile <= 1.0.1 - Reflected Cross-Site Scripting
WooCommerce Price Alert <= 1.0.4 - Reflected Cross-Site Scripting
Xpresslane Fast Checkout <= 1.0.0 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.