Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Ajax Search Pro <= 4.18.7 - Cross-Site Request Forgery to Cross-Site Scripting
Ajax Search Pro <= 4.18.7 - Authenticated (Subscriber+) SQL Injection
Newsletter <= 6.8.1 - Reflected Cross-Site Scripting
Elegant Themes (Multiple Versions) - Arbitrary File Upload
Quiz and Survey Master <= 7.0.0 - Unauthenticated Arbitrary File Deletion
Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorization
Newsletter <= 6.8.1 - Authenticated PHP Object Injection
Cross-site Scripting vulnerability in Kitodo.Presentation
False-positive validity for NFT1 genesis transactions
False-positive validity for NFT1 genesis transactions in SLPJS
Konzept - Fullscreen Portfolio WordPress Theme <= 2.4 - Reflected Cross-Site Scripting
JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change
JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure
dot-prop Prototype Pollution vulnerability
Signature Malleabillity in elliptic
Server side template injection in Apache Camel
Remote code execution in turn extension for TYPO3
Incorrect access control in typo3_forum
Directory traversal in rollup-plugin-server
Directory traversal in rollup-plugin-server
Insecure defaults in UmbracoForms
Authorization header is not sanitized in an error object in auth0
Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.