Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Business Directory Plugin < 5.11 - Cross-Site Request Forgery
Business Directory Plugin <= 5.11 - Authenticated PHP4 Upload
classyfrieds <= 3.8 - Arbitrary File Upload
Event Banner <= 1.3 - Cross-Site Request Forgery
Contact Form Check Tester <= 1.0.2 - Authenticated (Subscriber+) Cross-Site Scripting
Improper Input Validation in sopel-plugins.channelmgnt
Larsens Calender <= 1.2 - Authenticated Stored Cross-Site Scripting
Media File Renamer – Auto & Manual Rename <= 5.2.5 - Cross-Site Request Forgery
CSRF Vuln can expose user's QRcode
Imagements <= 1.2.5 - Arbitrary File Upload
WP Page Builder <= 1.2.3 - Insecure Default to Unauthorized Page Editing
WP Page Builder <= 1.2.3 - Multiple Stored Cross-Site scripting
WorkScout - Job Board WordPress Theme <= 2.0.31 - Stored Cross-Site Scripting
Stop Spammers <= 2021.8 - Reflected Cross-Site Scripting
Exposure of class information in RESTEasy
Improper Restriction of XML External Entity Reference in Plone
SSRF attacks via tracebacks in Plone
Improper Restriction of XML External Entity Reference in Plone
Improper Certificate Validation in phpseclib
Indico Tampering with links (e.g. password reset) in sent emails
OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross-Site Scripting
Rebuild-bot workflow may allow unauthorised repository modifications
Client TLS credentials sent raw to server in npm package nats
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.