Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Pixel Cat Lite <= 2.6.2 - Admin+ Stored Cross-Site Scripting
Modern Events Calendar Lite <= 6.1.4 - Unauthenticated Blind SQL Injection via time Parameter
Auto Featured Image <= 3.9.2 - Reflected Cross-Site Scripting
Inspirational Quote Rotator <= 1.0.0 - Stored Cross-Site Scripting
NEX-Forms – Ultimate Form Builder <= 8.4.2 - Cross-Site Request Forgery to Cross-Site Scripting
Contact Form Entries <= 1.2.3 - Reflected Cross-Site Scripting
Cross-site Scripting in django-helpdesk
Antilles Dependency Confusion Vulnerability
WordPress Popular Posts <= 5.3.2 - Authenticated Arbitrary File Upload
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 6.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting
Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery
Contact Form Email <= 1.3.24 - Authenticated (Admin+) Stored Cross-Site Scripting
Caldera forms <= 1.9.4 - Admin+ Stored Cross-Site Scripting
Like Button Rating <= 2.6.37 - Unauthorised Vote Export to Email & IP Addresses Disclosure
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Template injection in thymeleaf-spring5
Request injection in Spring Cloud Gateway
Improper Input Validation in pip
Apostrophe CMS Insufficient Session Expiration vulnerability
Unauthorized access to data in @sap-cloud-sdk/core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.