Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.1 - Reflected Cross-Site Scripting
useragent Regular Expression Denial of Service vulnerability
insane vulnerable to Regular Expression Denial of Service
Foundation Regular Expression Denial of Service vulnerability
CommonRegexJS Regular Expression Denial of Service vulnerability
nope-validator Regular Expression Denial of Service vulnerability
validate.js Regular Expression Denial of Service vulnerability
Knwl.js Regular Expression Denial of Service vulnerability
Funadmin Cross-site Scripting vulnerability
Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode
SQL injection in funadmin
SQL injection in funadmin
Logic flaw in Funadmin
SQL injection in funadmin
SQL injection in funadmin
SQL injection in funadmin
SQL injection in funadmin
SQL injection in funadmin
SQL injection in funadmin
Uix Shortcodes – Compatible with Gutenberg <= 1.9.9 - Unauthenticated Arbitrary Shortcode Execution
Clever Addons for Elementor <= 2.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.