Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Membermouse <= 2.2.8 - Blind SQL Injection
booking calendar for joomla!
Cross-Site Scripting in @ckeditor/ckeditor5-link
Loginizer 1.3.8-1.3.9 - Unauthenticated Stored Cross-Site Scripting
ProfileGrid – User Profiles, Memberships, Groups and Communities < 2.8.6 - Remote Code Execution
Charitable <= 1.5.13 - Unauthorized Access to Information Disclosure
CF7 Invisible reCAPTCHA < 1.3.2 - Cross-Site Scripting
Metronet Tag Manager < 1.2.9 - Cross-Site Request Forgery
Ultimate Member <= 2.0.3 - Improper Access Control
GD bbPress Attachments <= 2.5 - Stored Cross-Site Scripting
WP ULike < 3.2 - Missing Authorization
WP ULike < 3.2 - Cross-Site Scripting
Media File Manager <= 1.4.2 - Directory Traversal to Arbitrary File Relocation
WP User Groups <= 2.1.0 - Cross-Site Request Forgery
Media File Manager <= 1.4.2 - Directory Traversal to Arbitrary File Read
Media File Manager <= 1.4.2 - Directory Traversal to Directory Listing
Nexevo Contact Form - Backdoor
Ultimate Member < 2.0.4 - Authenticated Unrestricted File Upload
Ultimate Member <= 2.0.39 - Directory Traversal
BBE < 1.53 - Authorization Bypass
Ultimate Member < 2.0.4 - Insecure Direct Object Reference
drupal/svg_formatter - SA-CONTRIB-2018-027
drupal/simple_revision - SA-CONTRIB-2018-025
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.