Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass
WP Abstracts <= 2.6.1 - Reflected Cross-Site Scripting
Zero Spam for WordPress <= 5.4.4 - Authenticated(Administrator+) SQL Injection
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been suppor
craftcms/cms vulnerable to cross site scripting in RSS feed widget
Cross Site Scripting in nilsteampassnet/teampass
Cross Site Scripting in thorsten/phpmyfaq
Cross Site Scripting in thorsten/phpmyfaq
Apache Ranger Hive Plugin missing permissions check
Path Traversal in Ghost
AzuraCast missing brute force prevention
Uncontrolled Resource Consumption in OPC UA .NET Standard Reference Server
Exposure of Sensitive Information in OPC UA .NET Standard Reference Server
ONOS vulnerable to Cross-site Scripting
TheGem < 5.8.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
TK Google Fonts GDPR Compliant <= 2.2.7 - Authorization Bypass
Cryptocurrency Donation Box – Bitcoin & Crypto Donations <= 2.2.7 - Authenticated (Administrator+) SQL Injection
WP Job Portal <= 2.0.1 - Cross-Site Request Forgery to Settings Modification
Easy Appointments <= 3.11.9 - Cross-Site Request Forgery via multiple AJAX actions
Points and Rewards for WooCommerce <= 1.5.0 - Cross-Site Request Forgery to Settings Change
Community by PeepSo <= 6.0.9.0 - Missing Authorization to Sensitive Information Exposure
WPO365 | Mail Integration for Office 365 / Outlook <= 1.9.0 - reflected Cross-Site Scripting via error_description
Points and Rewards for WooCommerce <= 1.5.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.