Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Edit feed settings and others, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0
Remote Code Execution in Apache Synapse
Local Temp Directory Hijacking Vulnerability
WP Activity Log <= 4.1.4 - SQL Injection
publisher - XSS (Cross Site Scripting)
GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection
AccessPress Social Icons <= 1.8.0 - Author+ SQL Injection
Simple File List < 4.2.3 - Remote Code Execution
[CWE-22] Path traversal in Olea Gift On Order module (giftonorder) module for PrestaShop
Blog comment posting, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0
RCE via PHP Object injection via SOAP Requests
Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0
SW Ajax WooCommerce Search <= 1.2.6 - Reflected Cross-Site Scripting
Cross-site Scripting in Strapi
Improper Authorization in Strapi
WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
WordPress Core < 5.5.2 - Spam Embed on Multisite Installations
WordPress Core < 5.5.2 - Arbitrary File Deletion
WordPress Core < 5.5.2 - Misconfiguration That Allows Trigger of New Installation
WordPress Core < 5.5.2 - Stored Cross-Site Scripting via post slugs
WordPress Core < 5.5.2 - Cross-Site Request Forgery to Theme Image Change
WordPress Core < 5.5.2 - Deserialization Gadget
Greenmart <= 2.5.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.