Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
SupportCandy – Helpdesk & Support Ticket System <= 2.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Improper Input Validation and Injection in Apache Log4j2
NLTK Vulnerable to REDoS
PHP Everywhere <= 2.0.3 - Remote Code Execution by Subscriber+ users via shortcode
SupportCandy <= 2.2.6 - Stored Cross-Site Scripting via Shortcode
SupportCandy <= 2.2.6 - Cross-Site Request Forgery to Arbitrary Ticket Deletion
Advanced Cron Manager <= 2.4.1 - Subscriber+ Arbitrary Events/Schedules Creation/Deletion
Amazon Affiliate <= 3.17 - Reflected Cross-Site Scripting
Futurio Extra <= 1.6.2 - Authenticated (Admin+) SQL Injection
PHP Everywhere <= 2.0.3 - Authenticated (Contributor+) Remote Code Execution via Metabox
PHP Everywhere <= 2.0.3 - Remote Code Execution by Contributor+ users via gutenberg block
Cross site scripting in dolibarr
Asset CleanUp <= 1.3.8.4 - Reflected Cross-Site Scripting
TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Blog Option Update
Contact Form 7 Skins <= 2.5.0 - Reflected Cross-Site Scripting
TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Settings Update
SVG Support <= 2.3.19 Admin+ Cross-Site Scripting
Asset CleanUp <= 1.3.8.4 - Reflected Cross-Site Scripting via AJAX Action
NextScripts: Social Networks Auto-Poster <= 4.3.24 - Arbitrary Post Deletion via Cross-Site Request Forgery
Visual CSS Style Editor <= 7.5.3 - Reflected Cross-Site Scripting via wyp_page_type parameter
Document Embedder <= 1.7.8 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure
NextScripts: Social Networks Auto-Poster <= 4.3.23 - Unauthenticated Stored Cross-Site Scripting
Document Embedder < 1.7.6 - Sensitive Data Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.