Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Social Slider Feed <= 2.0.4 - Authenticated (Scubscriber+) Stored Cross-Site Scripting
Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing
Images Asynchronous Load <= 1.05 - Reflected Cross-Site Scripting
API info for Plugins & Themes from WP.ORG <= 1.04 - Reflected Cross-Site Scripting
Profile & Dashboard fields <= 1.03 - Reflected Cross-Site Scripting
Social Slider Feed <= 2.0.4 - Missing Authorization to Cross-Site Scripting
Social Slider Feed <= 2.0.4 - Reflected Cross-Site Scripting
MailerLite – Signup forms (official) <= 1.5.7 - Cross-Site Request Forgery
Debug Bar <= 1.85 - Reflected Cross-Site Scripting
Add Hierarchy (parent) to post <= 3.12 - Reflected Cross-Site Scripting
WP phpMyAdmin <= 5.2.0.3 - Reflected Cross-Site Scripting
Fast Flow <= 1.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch
Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another
mezzio-swoole Applications Using Diactoros Vulnerable to HTTP Host Header Attack
fs2-io skips mTLS client verification
chia-blockchain tokens can be inflated to an arbitrary extent
Floating Div <= 3.0 - Authenticated Stored Cross-Site Scripting
Feehi CMS Cross-site Scripting
Apache Calcite Avatica JDBC driver arbitrary code execution
automattic/mongoose vulnerable to Prototype pollution via Schema.path
WMAgent arbitrary code execution via a crafted dbs-client package
ЮKassa для WooCommerce <= 2.3.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.