Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Stored XSS by authenticated backend user with access to upload files
Privilege escalation by backend users assigned to the default "Publisher" system role
Secure File Manager < 2.8.2 - Remote Code Execution
Gutenberg Template and Pattern Library & Redux Framework <= 4.1.20 - Cross-Site Request Forgery
WooCommerce Anti-Fraud <= 3.2 - Insecure Direct Object Reference
Anti-Spam by CleanTalk < 5.149 - Authenticated SQL Injection
Easy Registration Forms <= 2.0.6 - CSV Injection
Import and export users and customers <= 1.16.3.5 - CSV injection via a customer's profile
Contextual Related Posts <= 2.9.3 - Cross-Site Request Forgery
Open redirect in Jupyter Notebook
Secret disclosure when containing characters that become URI encoded
Cross-Site Scripting through Fluid view helper arguments
drupal/miniorange_saml - SA-CONTRIB-2020-038
Drupal core - SA-CORE-2020-012
drupal/examples - SA-CONTRIB-2020-035
Open Redirect in werkzeug
Fancy Product Designer <= 4.5.0 - Stored Cross-Site Scripting
Reflected XSS with parameters in PostComment
XStream can be used for Remote Code Execution
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
Paid Memberships Pro <= 2.5.0 - Cross-Site Scripting
WP Database Error Manager <= 2.1.6 - Reflected Cross-Site Scripting
Persistent XSS in newsletter module in Shopware
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.