Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Caldera Forms Pro < 1.8.2 - Missing Authorization
GraceMedia Media Player <= 1.0 - Local File Inclusion
Webargs mishandles concurrent JSON parsing
WP Live Chat Support Pro <= 8.0.06 - Remote Code Execution via unrestricted file upload
Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting
WooCommerce Subscriptions < 2.6.3 - Stored Cross-Site Scripting
Rencontre – Dating Site <= 3.2.1 - Authenticated (Admin+) SQL Injection
Improper Input Validation in Apache Qpid Broker-J
Unauthenticated Remote Code Execution in Apache JMeter
drupal/eu_cookie_compliance - SA-CONTRIB-2019-033
Stack Overflow in Apache Mesos
Incomplete List of Disallowed Inputs in SOFA-Hessian
Moderate severity vulnerability that affects org.b3log:symphony
uap-core Regular Expression Denial of Service issue
Quiz And Survey Master <= 6.2.1 - Cross-Site Scripting
Smash Balloon Social Photo Feed <= 1.11.3 - Cross-Site Request Forgery to Back-Up Deletion
The Events Calendar <= 4.8.1 - Cross-Site Scripting via tribe_paged Parameter
Kunena - XSS (Cross Site Scripting)
Smart Forms < 2.6.26 - Cross-Site Request Forgery
Apache Airflow vulnerable to Stored XSS
drupal/facets - SA-CONTRIB-2019-030
FormCraft <= 1.2.1 - Cross-Site Request Forgery
FormCraft <= 1.2.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.