Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 400
Reset filtersMagento Improper Authorization vulnerability
Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
Magento Open Source Improper Authentication vulnerability
Magento Open Source Incorrect Authorization vulnerability
Magento Open Source Improper Authorization vulnerability
Magento Open Source Cross-Site Scripting (XSS) vulnerability
Magento Open Source Improper Access Control vulnerability
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability
Magento RCE,XSS and other vulnerabilities
Magento Cross-Site Scripting (XSS) vulnerability
Magento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities
Magento Open Source Security Advisory: Patch SUPEE-10975
Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerability
Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities
Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilities
Read private customer data reclaiming carts in Klaviyo Magento
Magento Open Source allows Cross-Site Scripting (XSS)
Magento Open Source allows Improper Input Validation
Magento LTS vulnerable to stored XSS in admin file form
Magento Open Source allows OS Command Injection
Magento Open Source allows Cross-Site Scripting (XSS)
Magento Open Source allows Cross-Site Request Forgery (CSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.