Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,029
Reset filtersShopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)
Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component
Shopper: privilege escalation via improper Livewire admin component authorization
Shopping privilege escalation through missing authorization in Settings components
Shopper: Negative discount values accepted and propagated through order calculation pipeline
Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers
Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration
drupal/ultimate_table_field - SA-CONTRIB-2026-153
drupal/term_glossary - SA-CONTRIB-2026-152
drupal/miniorange_saml - SA-CONTRIB-2026-151
drupal/miniorange_saml - SA-CONTRIB-2026-150
drupal/miniorange_saml - SA-CONTRIB-2026-149
drupal/miniorange_saml - SA-CONTRIB-2026-148
drupal/miniorange_saml - SA-CONTRIB-2026-147
drupal/miniorange_saml - SA-CONTRIB-2026-146
drupal/miniorange_saml - SA-CONTRIB-2026-145
drupal/miniorange_saml - SA-CONTRIB-2026-144
drupal/miniorange_saml - SA-CONTRIB-2026-143
drupal/miniorange_saml - SA-CONTRIB-2026-142
drupal/miniorange_saml - SA-CONTRIB-2026-141
drupal/safedelete - SA-CONTRIB-2026-140
drupal/key_auth - SA-CONTRIB-2026-138
drupal/feed_block - SA-CONTRIB-2026-137
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.