Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
WP tarteaucitron.js Self Hosted <= 1.2.4 - Running a Vulnerable Dependency
RealHomes <= 4.3.7 - Missing Authorization
RealHomes <= 4.3.7 - Missing Authorization
Exit Popups & Onsite Retargeting by OptiMonk <= 2.0.4 - Cross-Site Request Forgery
KB Support <= 1.5.88 - Missing Authorization to Sensitive Data Exposure
WPAdmin AWS CDN <= 2.0.13 - Cross-Site Request Forgery
Super Socializer <= 7.13.53 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email
WPSchoolPress <= 2.2.3 - Missing Authorization
Shortcode IMDB <= 6.0.8 - Cross-Site Request Forgery
All In One WP Security 5.1.9 - Plaintext Storage of Credentials
Improper neutralization of several SQL parameters in vivawallet module for PrestaShop
Whatsapp-Chat-Exporter has Cross-Site Scripting vulnerability in HTML output of chats.
ckeditor-wordcount-plugin vulnerable to Cross-site Scripting in Source Mode of Editor
Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller
XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
sweetalert2 contains potentially undesirable behavior
Apache MINA SSHD information disclosure vulnerability
Apache Camel information exposure vulnerability
TeamPass Cross-site Scripting vulnerability
Wallabag vulnerable to Allocation of Resources Without Limits or Throttling
HTTP Headers <= 1.18.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.