Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
OS Command Injection in lifion-verify-deps
Neos CMS vulnerable to XSS in various backend modules
Currency Switcher for WordPress <= 1.0.3 - Reflected Cross-Site Scripting
Image Gallery – Grid Gallery <= 1.1.1 - Stored Cross-Site Scripting
Easy Pricing Tables <= 3.2.0 - Reflected Cross-Site Scripting
JUX Timetable - SQL Injection
Login timing attack in ibexa/core
Login timing attack in ezsystems/ezpublish-kernel
Login timing attack in ezsystems/ezplatform-kernel
Embedded Malicious Code in ctx
Packing does not respect root-level ignore files in workspaces
Phoenix-ws source code and data in extensions folder is publicly available
Denial of service in bottle
Browser and Operating System Finder <= 1.2 - Missing Authorization
core plugin for kitestudio themes <= 2.2.1 - Reflected Cross-Site Scripting
My Content Management <= 1.7.1 - Cross-Site Scripting
Trade Runner <= 3.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site Scripting
HTML2WP <= 1.0.0 - Arbitrary File Upload
Woody code snippets <= 2.4.5 - Reflected Cross-Site Scripting
ShortPixel Image Optimizer <= 4.22.9 - Reflected Cross-Site Scripting
Download Manager <= 3.2.42 - Reflected Cross-Site Scripting
HTML2WP <= 1.0.0 - Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.