Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Project Cost Calculator <= 1.0.0 - Missing Authorization
AnWP Football Leagues <= 0.16.17 - Authenticated (Administrator+) CSV Injection
Restaurante <= 3.0.7 - Reflected Cross-Site Scripting
Themebox - Digital Products Ecommerce <= 1.4.2 - Reflected Cross-Site Scripting
WebinarIgnition <= 4.06.04 - Missing Authorization
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
The7 <= 12.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes
Gravity Forms Insightly <= 1.1.6 - Unauthenticated PHP Object Injection
Gravity Forms FreshDesk <= 1.3.5 - Unauthenticated PHP Object Injection
Craft CMS has a theoretical bypass for CVE-2025-23209
Liferay Portal Reflected XSS in blogs-web
The AuthKit Remix Library renders sensitive auth data in HTML
The AuthKit React Router Library rendered sensitive auth data in HTML
@fedify/fedify has Improper Authentication and Incorrect Authorization
Apache CXF: Untrusted JMS configuration can lead to RCE
Apache Seata: Deserialization of untrusted Data in Apache Seata Server
ExecuTorch integer overflow vulnerability
ExecuTorch out-of-bounds access vulnerability
ExecuTorch integer overflow vulnerability
ExecuTorch heap buffer overflow vulnerability
ExecuTorch vulnerable to Heap-based Buffer Overflow
Gravity Forms Constant Contact <= 1.1.2 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.