Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Gravity Forms WebHooks <= 1.6.0 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
NewsBlogger <= 0.2.5.4 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Digits < 8.4.6.1 - Authentication Bypass via Weak OTP
List Children <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Section Widget <= 3.3.1 - Unauthenticated Path Traversal
AM LottiePlayer <= 3.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Lottie File
ShowDoc unrestricted file upload vulnerability
tagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter
Auth0 NextJS SDK v4 Missing Session Invalidation
AngularJS improperly sanitizes SVG elements
@account-kit/smart-contracts Allowlist Module Bypass Vulnerability
YesWiki Stored XSS Vulnerability in Comments
YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution
YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download
YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
org.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type
org.xwiki.platform:xwiki-platform-component-wiki provides no warning when granting XWiki.ComponentClass programming right
The lesscss script service allows cache clearing without programming right
Solr script service doesn't take dropped programming right into account
org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.