Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Validation Bypass via Email Field
Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection
W3 Total Cache <= 0.9.2.4 - Sensitive Information Exposure
Coditor <= 1.1 - Remote Code Execution
W3 Total Cache <= 0.9.2.4 - Password Hash Extraction
15Zine | Magazine Newspaper Blog News WordPress Theme < 3.3.0 - Reflected Cross-Site Scripting
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27.1 - Stored Cross-Site Scripting
Potential XSS in jQuery dependency in Mirador
Heap Overflow in PyMiniRacer
Apache Airflow Cross-site Scripting
Team Showcase <= 1.22.15 - Object Injection
Discount Rules for WooCommerce <= 2.2.0 - Missing Authorization
Team Showcase <= 1.22.15 - Stored Cross-Site Scripting
Team Showcase <= 1.22.15 - Stored Cross-Site Scripting
Team Showcase <= 1.22.15 - Object Injection
Drupal core - SA-CORE-2020-011
Drupal core - SA-CORE-2020-008
Drupal core - SA-CORE-2020-010
Drupal core - SA-CORE-2020-009
Drupal core - SA-CORE-2020-007
Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass
Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass
RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.