Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
WP Stripe Checkout <= 1.2.2.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Video Player <= 1.2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Responsive Lightbox2 <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Flowerplayer Video Player <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
SMSA Shipping for WooCommerce <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Download
Reflected XSS in querystring parameters
Stored XSS using HTMLEditor
Stored XSS using uppercase characters in HTMLEditor
Silverstipe CMS Stored XSS in custom meta tags
Silverstripe XSS in shortcodes
XSS via uploaded gpx file
URL XSS vulnerability due to outdated jquery in CMS
Uncaught exception in engine.io
Cross site scripting vulnerability with discussion titles
`CHECK` failure in `SobolSample` via missing validation
`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode
Missing Authorization in Filter Stream Converter Application of XWiki-platform
Exposure of Private Personal Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-rest-server
Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-menu-ui
Plaintext storage of password after a reset in org.xwiki.platform:xwiki-platform-security-authentication-default
Creation of new database tables through login form on PostgreSQL
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.