Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
DPortfolio <= 2.0 - Reflected Cross-Site Scripting
DK White Label <= 1.0 - Reflected Cross-Site Scripting
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Cookie Consent'
Simple Pricing Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
EKC Tournament Manager <= 2.2.1 - Cross-Site Request Forgery to Tournament and Team Creation
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
Reservit Hotel <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
EKC Tournament Manager <= 2.2.1 - Cross-Site Request Forgery to Tournament Deletion
Missing permission check in Jenkins Script Security Plugin
Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin
Stored XSS vulnerability in Jenkins Authorize Project Plugin
Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin
Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
FileManager Deserialization of Untrusted Data vulnerability
UnoPim Stored XSS : Cookie hijacking through Create User function
Symfony has an Authentication Bypass via RememberMe
drupal/postfile - SA-CONTRIB-2024-060
drupal/postfile - SA-CONTRIB-2024-059
DotNetZip Directory Traversal vulnerability
Moodle IDOR when accessing list of badge recipients
Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.