Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Real-Time Find and Replace <= 3.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Gmedia Photo Gallery <= 1.18.4 - Cross-Site Scripting
Duplicate Page Plugins <= (Various Versions) - SQL Injection
Avada <= 6.2.2 - Authenticated (Contributor+) Cross-Site Scripting
YOP Poll <= 6.1.4 - Authenticated Stored Cross-Site Scripting
jackson-databind mishandles the interaction between serialization gadgets and typing
jackson-databind mishandles the interaction between serialization gadgets and typing
jackson-databind mishandles the interaction between serialization gadgets and typing
Command Injection in npm-programmatic
jackson-databind mishandles the interaction between serialization gadgets and typing
WP GDPR <= 2.1.1 - Unauthenticated Stored Cross-Site Scripting
Advanced Woo Search <= 2.00 - Information Disclosure
WP GDPR <= 2.1.1 - Missing Authorization Checks
Information disclosure of source code in SimpleSAMLphp
Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET
Negative charge in shopping cart in Shopizer
Catch Breadcrumb <= 1.5.4 - Reflected Cross-Site Scripting
Timetable and Event Schedule by MotoPress <= 2.3.8 - Missing Authorization
Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting
SQL injection in Tortoise ORM
XSS in python-markdown2
GTranslate <= 2.8.51 - Reflected Cross Site Scripting
LearnPress <= 3.2.6.8 - Privilege Escalation via accept-to-be-teacher action parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.