Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Winter CMS Server-Side Template Injection (SSTI) vulnerability
CodeIgniter4 DoS Vulnerability
Elasticsearch Uncaught Exception leading to crash
Incorrect Access Control in NodeBB
SEO Title Tag <= 3.5.9 - Reflected Cross-Site Scripting
AdsPlace'r – Ad Manager, Inserter, AdSense Ads <= 1.1.5 - Reflected Cross-Site Scripting
Thumbs Rating <= 5.1.0 - Unauthenticated Insecure Direct Object Reference
Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Awesome Support <= 6.1.7 - Missing Authorization
FG PrestaShop to WooCommerce <= 4.45.1 - Unauthenticated Sensitive Information Disclosure
Weekly Class Schedule <= 3.19 - Reflected Cross-Site Scripting
Comic Easel <= 1.15 - Reflected Cross-Site Scripting
Header Image Slider <= 0.3 - Reflected Cross-Site Scripting
ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Convert Post Types <= 1.4 - Reflected Cross-Site Scripting
LWS Optimize <= 1.9.1 - Cross-Site Request Forgery
Easy Social Feed <= 6.5.6 - Cross-Site Request Forgery
Woocommerce Social Media Share Buttons <= 1.3.0 - Cross-Site Request Forgery to Cross-Site Scripting
Tax Rate Upload <= 2.4.5 - Reflected Cross-Site Scripting
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Appointment Calendar <= 2.9.6 - Reflected Cross-Site Scripting
Sticky Anything <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting
DD Rating <= 1.7.1 - Authenticated (Author+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.