Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersContao can disclose sensitive information in the news module
Contao discloses sensitive information in the front end search index
Contao applies improper access control in the back end voters
drupal/owlcarousel2 - SA-CONTRIB-2025-104
drupal/api_key_manager - SA-CONTRIB-2025-103
drupal/sync_composer_with_contrib - SA-CONTRIB-2025-102
drupal/protected_pages - SA-CONTRIB-2025-101
drupal/facets - SA-CONTRIB-2025-100
drupal/facets - SA-CONTRIB-2025-099
drupal/alogin - SA-CONTRIB-2025-098
The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability
Badaso CMS file upload vulnerability
Easy!Appointments SQL injection vulnerability
Craft CMS Potential Remote Code Execution via Twig SSTI
Adminer PHP Object Injection issue leads to Denial of Service
PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser
UnoPim has CSV Injection on Quick Export feature
UnoPim has Broken Access Control
UnoPim vulnerable to CSRF on Product edit feature and creation of other types
UnoPim vulnerable to remote code execution through Arbitrary File upload
UnoPim has Stored Cross-site Scripting vulnerability in user creation functionality
WP Crontrol - 1.17.0 - 1.19.1 - Authenticated (Administrator+) Blind Server-Side Request Forgery
moonshine Stored Cross-Site Scripting Vulnerability in Create Admin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.