Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
ImageMagick: Out of bounds read in multiple coders read raw pixel data
ImageMagick: Infinite loop vulnerability when parsing a PCD file
ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression
MindsDB: Path Traversal in /api/files Leading to Remote Code Execution
Metro <= 2.13 - Reflected Cross-Site Scripting
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty <= 3.5.1 - Unauthenticated Information Exposure
W3 Total Cache <= 2.9.1 - Unauthenticated Arbitrary Code Execution
Musico < 3.4.5 - Reflected Cross-Site Scripting
DesignThemes Portfolio <= 1.3 - Reflected Cross-Site Scripting
Gecko 6.0 - Responsive Shopify Theme - RTL support <= 1.9.8 - Reflected Cross-Site Scripting
NextScripts: Social Networks Auto-Poster <= 4.4.7 - Authenticated (Contributor+) PHP Object Injection
Metro <= 2.13 - Unauthenticated Local File Inclusion
ElementsKit Elementor addons Lite < 3.7.9 - Missing Authorization
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.2.3 - Authenticated (Subscriber+) SQL Injection
Aora - Home & Lifestyle Elementor WooCommerce Theme <= 1.3.15 - Unauthenticated Local File Inclusion
Celeste <= 1.3.6 - Unauthenticated PHP Object Injection
Embed Calendly <= 4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bricks Builder <= 2.1.4 - Missing Authorization
tagDiv Composer <= 5.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce Order Details <= 3.1 - Missing Authorization
Claue - Clean, Minimal Elementor WooCommerce <= 2.2.7 - Reflected Cross-Site Scripting
Novarain/Tassos Framework - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.