Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
drupal/elf - SA-CONTRIB-2019-063
drupal/super_login - SA-CONTRIB-2019-062
All In One WP Security & Firewall <= 4.0.8 - SQL Injection
Contact Form by BestWebSoft – Advanced Contact Us Form Builder for WordPress <= 4.0.1 - Cross-Site Scripting
Easy Drag And drop All Import : WP Ultimate CSV Importer <= 5.6 - Cross-Site Request Forgery
Ultimate Member <= 2.0.3 - Cross Site Scripting
Ultimate Member <= 2.0.3 - Directory Traversal
Contact Form Email <= 1.2.65 - Cross-Site Request Forgery
CformsII <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request Forgery
GiveWP - Donation Plugin and Fundraising Platform <= 2.5.0 - SQL Injection
JVM WooCommerce Wishlist <= 1.2.6 - Insecure Direct Object Reference
Contact Form Email <= 1.2.65 - Cross-Site Scripting
Social Feed Gallery <= 2.4.7 - Cross-Site Request Forgery
Ultimate Member <= 1.3.88 - Cross Site Scripting
JS support ticket - SQL Injection
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authentication on Option Changes
PPOM for WooCommerce <= 18.3 - Authenticated Stored Cross-Site Scripting
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authorization
Social LikeBox & Feed <= 2.8.4 - Cross-Site Request Forgery to Cross-Site Scripting
Cross-site scripting in recommender-xblock
Pallets Werkzeug Insufficient Entropy
SQL Injection in Django
WP SVG Icons <= 3.2.2 - Cross-Site Request Forgery to Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.