Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
LibreNMS has a Stored XSS vulnerability in its Alert Transport name field
Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messages
Spring Cloud Gateway Server Webflux is vulnerable to Expression Language Injection
Strapi is vulnerable to Insufficient Session Expiration
Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability
Easy Post Submission <= 1.7.0 - Unauthenticated Sensitive Information Exposure
SureRank <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Construction Light <= 1.6.7 - Missing Authorization
Front End Users <= 3.2.33 - Missing Authorization
tagDiv Cloud Library < 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Table For WooCommerce <= 1.2.4 - Authenticated (Contributor+) PHP Object Injection
MDTF <= 1.3.6 - Missing Authorization
Estatik <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Event post <= 5.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kallyas <= 4.22.0 - Missing Authorization
Event Tickets <= 5.26.3 - Missing Authorization
WP SMS <= 7.0.1 - Missing Authorization
CloudSearch <= 3.0.0 - Cross-Site Request Forgery
Tab Ultimate <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
WowRevenue <= 1.2.13 - Missing Authorization
Pie Calendar <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
SmartCrawl <= 3.14.3 - Missing Authorization
WP Travel Gutenberg Blocks <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.