Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
StoryChief <= 1.0.30 - Authenticated Stored Cross-Site Scripting
StoryChief <= 1.0.30 - Reflected Cross-Site Scripting
SMS Alert Order Notifications – WooCommerce <= 3.4.6 - Cross-Site Scripting
Bold Page Builder <= 3.1.5 - PHP Object Injection
Youtube Feeder <= 2.0.1 - Cross-Site Request Forgery
Nifty Newsletters <= 4.0.23 – Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Dialog <= 1.2.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting
youForms for WordPress – Creating Forms for CopeCart <= 1.0.5 - Stored Cross-Site Scripting
有赏 You Shang <= 1.0.1 - Authenticated Stored Cross-Site Scripting
JiangQie Official Website Mini Program < 1.1.1 - SQL Injection
XML External Entity Reference in Glances
FluentSMTP <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Splash Header < 1.20.8 - Stored Cross-Site Scripting
WordPress Download Manager <= 3.1.24 - Cross-Site Scripting
WordPress Download Manager <= 3.1.24 - Authenticated File Upload
Alojapro Widget <= 1.1.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Out-of-bounds Write in ChakraCore
Out-of-bounds Write in ChakraCore
Out-of-bounds write in ChakraCore
Out-of-bounds write in ChakraCore
Out-of-bounds write in ChakraCore
Out-of-bounds write in ChakraCore
Out-of-bounds write in ChakraCore
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.