Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
phin may include sensitive headers in subsequent requests after redirect
Matrix IRC Bridge truncated content of messages can be leaked
Code injection in Apache Zeppelin Shell
mysql2 Remote Code Execution (RCE) via the readCodeFor function
Summernote vulnerable to cross-site scripting
WP Migration Plugin DB & Files – WP Synchro <= 1.11.2 - Cross-Site Request Forgery
Digital Publications by Supsystic <= 1.7.7 - Cross-Site Request Forgery
Email Marketing for WooCommerce by Omnisend <= 1.14.3 - Cross-Site Request Forgery
Popup Box – new WordPress popup plugin <= 2.2.6 - Cross-Site Request Forgery
Search Keyword Redirect <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Leadinfo <= 1.0 - Cross-Site Request Forgery
Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Cross-Site Request Forgery
WooCommerce UPS Shipping – Live Rates and Access Points <= 2.2.4 - Cross-Site Request Forgery
Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Missing Authorization
WP Mail Catcher <= 2.1.6 - Cross-Site Request Forgery
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
Counter Box – WordPress plugin for countdown, timer, counter <= 1.2.3 - Cross-Site Request Forgery
Before And After <= 3.9 - Cross-Site Request Forgery
Sync Post With Other Site <= 1.5.1 - Cross-Site Request Forgery
WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization
Shopkeeper Extender <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
NextMove Lite <= 2.18.1 - Cross-Site Request Forgery
Sangar Slider <= 1.3.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.