Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
TYPO3 Remote Code Execution in third party library swiftmailer
Arbitrary Code Execution in TYPO3 CMS
Insecure Deserialization in TYPO3 CMS
Cross-Site Scripting (XSS) vulnerability in typolinks
Cross-Site Scripting (XSS) in TYPO3 Backend
Cross-Site Scripting in third party library mso/idna-convert
Information Disclosure in TYPO3 Backend
Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
SQL Injection in TYPO3 Frontend Login
Missing Access Check in TYPO3 CMS
Insecure Unserialize in TYPO3 Import/Export
Cross-Site Scripting in TYPO3 Backend
Privilege Escalation in TYPO3 CMS
Cross-Site Scripting in TYPO3 Backend
Authentication Bypass in TYPO3 CMS
Arbitrary JavaScript execution due to using outdated libraries
Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion
Digital products download without proper payment status check
Remote code execution in web server context
Arbitrary file read via Playwright's screenshot feature exploiting file wrapper
Vulnerable embedded jQuery Version
XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update
Testimonials Widget <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via testimonials Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.