Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
@keystone-6/auth Open Redirect vulnerability
drupal/office_hours - SA-CONTRIB-2023-020
Apache Struts vulnerable to memory exhaustion
Apache Struts vulnerable to memory exhaustion
myCred <= 2.5 - Cross-Site Request Forgery
Stock Manager for WooCommerce <= 2.10.0 - Cross-Site Request Forgery
Form Maker <= 1.15.16 - Missing Authorization in check_score
Fat Rat Collect <= 2.6.0 - Missing Authorization
nuxt Code Injection vulnerability
Insecure Temporary File in HuTool
Dolibarr vulnerable to unauthenticated database access
Druid ingestion system Authenticated users can read data from other sources than intended
Church Admin <= 3.7.29 - Reflected Cross-Site Scripting
MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
Recent Posts Slider <= 1.1 - Reflected Cross-Site Scripting
Password Protected <= 2.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update
Login Configurator <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WooCommerce Stripe Payment Gateway <= 7.4.0 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Disclosure
Booking and Rental Manager <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.