Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
Euro FxRef Currency Converter <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via currency Shortcode
A vulnerability has been found in wasm3 0.5.0 and classified as problematic. This vulnerability affects the function MarkSlotAllocated of the file source/m3_compile.c. The manipulation leads to out-of
PowSyBl Core Contains a Polynomial ReDoS in RegexCriterion
PowSyBl Core contains Polynomial REDoS’es
PowSyBl Core allows deserialization of untrusted SparseMatrix data
DotVVM allows path traversal when deployed in Debug mode
PowSyBl Core XML Reader allows XXE and SSRF
Apache SeaTunnel: Unauthenticated insecure access
WP Inventory Manager <= 2.3.4 - Cross-Site Request Forgery
Recipes manager - WPH <= 1.0.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Giveaways and Contests by RafflePress <= 1.12.18 - Missing Authorization
Modern Footnotes <= 1.4.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily <= 1.2.4.5 - Missing Authorization
WPThumb <= 0.10 - Authenticated (Contributor+) Server-Side Request Forgery
Hand Talk <= 6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Customer Area <= 8.2.5 - Missing Authorization
ClipLink <= 1.1 - Cross-Site Request Forgery
Download Attachments <= 1.3.1 - Unauthenticated Insecure Direct Object Reference
IP Based Login <= 2.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP-DownloadCounter <= 1.01 - Cross-Site Request Forgery
ANON::form embedded secure form <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Login/Signup Popup <= 2.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.