Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
drupal/block_attributes - SA-CONTRIB-2025-090
drupal/file_download - SA-CONTRIB-2025-089
Madara - Core <= 2.2.3 - Unauthenticated Arbitrary File Deletion
Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints
Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console
Eclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attempts
Eclipse GlassFish is vulnerable to Stored XSS attacks through configuration file modifications
Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console
Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console
Reactor Netty HTTP is vulnerable to credential leaks during chained redirects
Welcart e-Commerce <= 2.11.16 - Authenticated (Editor+) Stored Cross-Site Scripting
SMTP for Amazon SES <= 1.9 - Authenticated (Administrator+) SQL Injection
Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin <= 4.48 - Missing Authorization
Webba Booking <= 5.1.20 - Cross-Site Request Forgery
JetPopup <= 2.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stop and Block bots plugin Anti bots <= 1.48 - Missing Authorization
Newsletters <= 4.10 - Cross-Site Request Forgery
JetTabs <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
JetPopup <= 2.0.15 - Authenticated (Subscriber+) Information Disclosure
Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Reflected Cross-Site Scripting
Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Unauthenticated Local File Inclusion
JetPopup <= 2.0.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
AntiSpam for Contact Form 7 <= 0.6.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.