Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
MWW Disclaimer Buttons <= 3.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Libsyn Publisher Hub <= 1.4.4 - Cross-Site Request Forgery
EZ Form Calculator <= 2.14.0.3 - Reflected Cross-Site Scripting
Asgaros Forum <= 2.8.0 - Cross-Site Request Forgery
BA Book Everything <= 1.6.4 - Authenticated (Contributor+) SQL Injection
WebinarIgnition <= 3.05.8 - Cross-Site Request Forgery
Mautic vulnerable to stored cross-site scripting in description field
phin may include sensitive headers in subsequent requests after redirect
Matrix IRC Bridge truncated content of messages can be leaked
Code injection in Apache Zeppelin Shell
mysql2 Remote Code Execution (RCE) via the readCodeFor function
Summernote vulnerable to cross-site scripting
WP Migration Plugin DB & Files – WP Synchro <= 1.11.2 - Cross-Site Request Forgery
Digital Publications by Supsystic <= 1.7.7 - Cross-Site Request Forgery
Email Marketing for WooCommerce by Omnisend <= 1.14.3 - Cross-Site Request Forgery
Popup Box – new WordPress popup plugin <= 2.2.6 - Cross-Site Request Forgery
Search Keyword Redirect <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Leadinfo <= 1.0 - Cross-Site Request Forgery
Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Cross-Site Request Forgery
WooCommerce UPS Shipping – Live Rates and Access Points <= 2.2.4 - Cross-Site Request Forgery
Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Missing Authorization
WP Mail Catcher <= 2.1.6 - Cross-Site Request Forgery
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.