Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Cross-site Scripting in facturascripts
Allocation of Resources Without Limits or Throttling in Spring Framework
Denial of service in Spring Framework
semver-regex <= 3.1.3 and 4.0.0-4.0.3 - Regular Expression Denial of Service (ReDoS)
Cross site scripting in code-server
Quick Restaurant Reservations <= 1.4.1 - Reflected Cross-Site Scripting
Google Tag Manager for WordPress <= 1.15 - Cross-Site Scripting via Cloudflare Country Code
Loginizer <= 1.7.5 - Reflected Cross-Site Scripting via 'name'
WordPress Forms by Pie Forms <= 1.4.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
WP Simple Adsense Insertion <= 2.0 - Cross-Site Request Forgery
Privilege escalation in easyappointments
Race Condition in Grunt
WP Statistics <= 13.2.1 - Reflected Cross-Site Scripting
WP Fundraising Donation and Crowdfunding Platform <= 1.4.2 - Unauthenticated SQL Injection
WooCommerce Green Wallet Gateway <= 1.0.1 - Reflected Cross-Site Scripting
Database Backup for WordPress <= 2.5.1 - Cross-Site Request Forgery to Settings Update
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
Incorrect Authorization in microweber
Improper account password reset in Craft CMS
Easy FAQ with Expanding Text <= 3.2.8.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
WPQA - Builder forms Addon For WordPress <= 5.3 - Reflected Cross-Site Scripting
Use Any Font | Custom Font Uploader <= 6.2.7 - Cross-Site Scripting
Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam <= 2.0.0 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.