Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
WP Code Highlight.js <= 0.6.2 - Cross-Site Request Forgery to Cross-Site Scripting
Adaptive Images for WordPress <= 0.6.66 - Arbitrary File Deletion
Improper Restriction of XML External Entity Reference in ladon
OneSignal Web Push Notifications <=1.17.7 - Stored Cross-Site Scripting
Category Specific RSS Feed Subscription <= 2.0 - Cross-Site Request Forgery
Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection
All-in-One WP Migration <= 6.97 - Authenticated Stored Cross-Site Scripting
System.Management.Automation subject to bypass via script debugging
Drupal core - SA-CORE-2019-008
Deserialization of untrusted data in FasterXML jackson-databind
Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage
Coming Soon Page & Maintenance Mode <= 1.8.1 - Unauthenticated Settings Reset
Deserialization of Untrusted Data in jackson-databind
Cross-Site Scripting in @nuxt/devalue
Path Traversal in http-file-server
python-engineio vulnerable to Cross-Site Request Forgery (CSRF)
WordPress Ultra Simple Paypal Shopping Cart <= 4.4 - Cross-Site Request Forgery
Web Librarian <= 3.5.4 - SQL Injection
Coming Soon Page & Maintenance Mode <= 1.8.1 - Stored Cross Site Scripting
XML Injection in python-libnmap
Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution
School Management System for Wordpress <= 56.0 - Cross-Site Request Forgery
WP Code Highlight.js <= 0.6.3 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.