Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,393
Reset filtersdrupal/smart_content - SA-CONTRIB-2026-190
drupal/css_usage_analyzer - SA-CONTRIB-2026-189
drupal/combined_image_style - SA-CONTRIB-2026-188
drupal/ai_ckeditor - SA-CONTRIB-2026-187
drupal/tawk_to - SA-CONTRIB-2026-184
drupal/stop_admin - SA-CONTRIB-2026-183
drupal/mermaid_diagram_field - SA-CONTRIB-2026-180
drupal/project_browser - SA-CONTRIB-2026-178
drupal/cloud - SA-CONTRIB-2026-177
drupal/cloud - SA-CONTRIB-2026-176
drupal/webform - SA-CONTRIB-2026-175
drupal/webform - SA-CONTRIB-2026-174
drupal/webform - SA-CONTRIB-2026-173
drupal/webform - SA-CONTRIB-2026-172
drupal/webform - SA-CONTRIB-2026-171
drupal/webform - SA-CONTRIB-2026-169
drupal/webform - SA-CONTRIB-2026-168
drupal/webform - SA-CONTRIB-2026-159
drupal/webform - SA-CONTRIB-2026-155
Solspace Freeform: Limited Twig template injection via submitted field values
WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost
REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates
REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.