Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
PublishPress Capabilities <= 2.3.2 - Reflected Cross-Site Scripting
SpiderCalendar <= 1.6.64 - Reflected Cross-Site Scripting
Side Cart Woocommerce (Ajax) <= 2.0 - Cross-Site Request Forgery to Arbitrary Options Update
NewStatPress <= 1.3.5 - Reflected Cross-Site Scripting
Log entry injection in Spring Framework
Prototype Pollution in extend2
Prototype Pollution in realms-shim
Logic error in dolibarr
Deserialization of Untrusted Data in Dubbo
Exposure of sensitive information in follow-redirects
Potential exposure of tokens to an Unauthorized Actor
Access to restricted PHP code by dynamic static class access in smarty
Sandbox Escape by math function in smarty
Reflected cross-site scripting (XSS) vulnerability
XSS vulnerability in translations
Zalgo-like output that crashes the server
WP-DownloadManager plugin <= 1.68.6 - Stored Cross-Site Scripting
Cross-site Scripting in django-cms
Quiz And Survey Master <= 7.3.6 - Reflected Cross-Site Scripting
Quiz And Survey Master <= 7.3.6 - Cross-Site Request Forgery
PowerPack Lite for Beaver Builder <= 1.2.9.2 Reflected Cross-Site Scripting
WP Ultimate CSV Importer <= 6.4.0 - Arbitrary File Upload
Remove Footer Credit <= 1.0.10 - Admin+ Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.