Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Unauthenticated Settings Import/Export
WordPress Geolocation Plugin – CF Geo Plugin <= 7.13.11 - Reflected Cross-Site Scripting
underConstruction <= 1.18 - Reflected Cross-Site Scripting
Improper Resource Shutdown or Release in TYPO3 extension
Cross-site Scripting in TYPO3 extension
Cross-Site Request Forgery in express-cart
Layout XML Arbitrary Code Fix
Data Flow Sanitation Issue Fix
Cross-site scripting in imgURL
Injection in MockServer
Dolibarr Cross-site Scripting vulnerability
Cross-site scripting in feehicms
Improper Restriction of Rendered UI Layers or Frames in yourls
Cross-site scripting vulnerability in file upload
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
Insecure direct object reference of log files of the Import/Export feature
Command injection in mail agent settings
Manipulation of product reviews via API
October CMS auth bypass and account takeover
Exposed phpinfo() leadked via documentation files
Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore
Account Takeover in Octobercms
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.