Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs
Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON
RSFirewall! <= 1.1.42 - Authenticated (Admin+) Arbitrary File Read
WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
URL Shortener <= 3.0.7 - Unauthenticated PHP Object Injection
WordPress-WPJobBoard <= 25.07010000-WP6.8.1-JB5.11.5 - Unauthenticated SQL Injection
Friends 3.5.1 - Authenticated (Subscriber+) PHP Object Injection
URL Shortener <= 3.0.7 - Unauthenticated SQL Injection
Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Unauthenticated Arbitrary File Upload
Product XML Feed Manager for WooCommerce <= 2.9.2 - Missing Authorization
SureForms <= 1.7.1 - Reflected Cross-Site Scripting
ShareBang, Ultimate Social Share Buttons for WordPress <= 1.4 - Reflected Cross-Site Scripting
Helpdesk Support Ticket System for WooCommerce <= 2.1.0 - Unauthenticated Arbitrary File Upload
Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection
Simple Link Directory < 14.8.1 - Authentication Bypass
HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Unauthenticated Arbitrary File Upload
gAppointments <= 1.14.1 - Reflected Cross-Site Scripting
The E-Commerce ERP <= 2.1.1.3 - Unauthenticated Privilege Escalation
WP-BusinessDirectory <= 3.1.4 - Unauthenticated SQL Injection
Houzez <= 4.1.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload
Contest Gallery <= 26.0.6 - Reflected Cross-Site Scripting
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.