Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
TeploBot - Telegram Bot for WP <= 1.3 - Telegram Bot Token Disclosure
Custom Icons for Elementor <= 0.3.3 - Authenticated (Admin+) Arbitrary File Upload
Denial of service in http-proxy-middleware
StreamWeasels Twitch Integration <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-twitch-embed Shortcode
Security Update for the OPC UA .NET Standard Stack
Security Update for the OPC UA .NET Standard Stack
ElementInvader Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Information Exposure
Spring Framework DataBinder Case Sensitive Match Exception
Social Link Groups <= 1.1.0 - Authenticated (Contributor+) SQL Injection
GoogleDrive folder list <= 2.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
APA Register Newsletter Form <= 1.0.0 - Cross-Site Request Forgery to SQL Injection
MyTweetLinks <= 1.1.1 - Authenticated (Subscriber+) SQL Injection
Endless Posts Navigation <= 2.2.7 - Cross-Site Request Forgery
Registrations for the Events Calendar – Event Registration Plugin <= 2.12.3 - Unauthenticated Stored Cross-Site Scripting
Duplicate Title Validate <= 1.0 - Authenticated (Subscriber+) SQL Injection
SermonAudio Widgets <= 1.9.3 - Authenticated (Contributor+) SQL Injection
WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting
WP Education <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via text_html_tag
Shipyaari Shipping Management <= 1.2 - Unauthenticated PHP Object Injection
SiteBuilder Dynamic Components <= 1.0 - Unauthenticated PHP Object Injection
Author Discussion <= 0.2.2 - Authenticated (Subscriber+) SQL Injection
WordPress Image SEO <= 1.1.4 - Cross-Site Request Forgery
Back Link Tracker <= 1.0.0 - Cross-Site Request Forgery to SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.