Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Missing authorization in Liferay portal
toui allows user-specific variables to be shared between users
Malware in pre-build binaries of bignum
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
SSCMS vulnerable to Cross Site Scripting
Code injection in nilsteampassnet/teampass
Upload Resume <= 1.2.0 - Captcha Bypass via resume_upload_form
JetFormBuilder <= 3.0.6 - Cross-Site Request Fogery via 'do_admin_action'
MStore API <= 3.9.2 - Authentication Bypass
Easy Google Maps <= 1.11.7 - Cross-Site Request Forgery
WooCommerce Product Vendors <= 2.1.76 - Authenticated (Vendor admin+) SQL Injection
WooCommerce Follow-Up Emails <= 4.9.50 - Authenticated (Follow-up emails manager+) SQL Injection
Responsive Tabs For WPBakery Page Builder <= 1.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
WordPress Backup & Migration <= 1.4.0 - Missing Authorization via wt_delete_schedule
Yoast SEO: Local <= 14.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tutor LMS <= 2.1.8 - Missing Authorization via multiple AJAX actions
Uncanny Automator <= 4.14 - Cross-Site Request Forgery via update_automator_connect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.