Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
SQL injection in helloxz/imgurl
Path Traversal in FileGator
Business Logic Errors in Para
Cross site scripting in SiteServer CMS
SQL injection in SiteServer CMS
Improper user session handling in filegator
Undertow Uncontrolled Resource Consumption
Wildfly-Core user account mismanagement
undertow Race Condition vulnerability
VS Contact Form <= 11.5 - Reflected Cross-Site Scripting
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.9.5 - Authenticated Cross-Site Scripting
Codup Read Only Admin <= 1.1.1.7 - Cross Site Scripting
Dropdown and scrollable Text <= 2.0 - Cross-Site Scripting
Wbcom Designs – BuddyPress Group Reviews <= 2.8.1 - Cross-Site Scripting
Direct Checkout for WooCommerce – Skip Cart with Buy Buttons <= 1.2 - Cross-Site Request Forgery to Settings Update
Easy PayPal Shopping Cart <= 1.1.9 - Cross-Site Request Forgery to Cross-Site Scripting
Subscriptions & Memberships for PayPal <= 1.1.5 - Reflected Cross-Site Scripting
Accept Donations with PayPal <= 1.3 - Reflected Cross-Site Scripting via Page
Easy PayPal Events <= 1.1.6 - Reflected Cross-Site Scripting via Page
WordPress to Freshsales Integration <= 1.3.2.2 - Cross-Site Scripting
Elements For Elementor <= 1.9 - Stored Cross-Site Scripting
Magento stored cross-site scripting vulnerability
Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.