Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
drupal/tawk_to - SA-CONTRIB-2026-184
drupal/stop_admin - SA-CONTRIB-2026-183
drupal/rest_api_authentication - SA-CONTRIB-2026-182
drupal/cookiecuttr - SA-CONTRIB-2026-181
drupal/mermaid_diagram_field - SA-CONTRIB-2026-180
drupal/commerce_decoupled_checkout - SA-CONTRIB-2026-179
SiteSkite – Secure MCP & AI WebOps. Connect ChatGPT, Claude, or Any AI Agent via MCP <= 2.1.7 - Authenticated (Contributor+) Insecure Direct Object Reference
Team – Team Members Showcase Plugin <= 6.0.0 - Unauthenticated Insecure Direct Object Reference
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.69 - Authenticated (Contributor+) Stored Cross-Site Scripting
drupal/project_browser - SA-CONTRIB-2026-178
drupal/cloud - SA-CONTRIB-2026-177
drupal/cloud - SA-CONTRIB-2026-176
JetTricks <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
drupal/webform - SA-CONTRIB-2026-175
drupal/webform - SA-CONTRIB-2026-174
drupal/webform - SA-CONTRIB-2026-173
drupal/webform - SA-CONTRIB-2026-172
drupal/webform - SA-CONTRIB-2026-171
drupal/webform - SA-CONTRIB-2026-170
drupal/webform - SA-CONTRIB-2026-169
AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.7.8 - Unauthenticated Insecure Direct Object Reference
drupal/webform - SA-CONTRIB-2026-168
drupal/webform - SA-CONTRIB-2026-167
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.