Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Heureka <= 1.0.8 - Cross-Site Request Forgery
RegistrationMagic <= 5.2.5.9 - Cross-Site Request Forgery
Beaver Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget
Tutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&A
Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting
Yet Another Related Posts Plugin (YARPP) <= 5.30.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
Simple Job Board <= 2.10.8 - Missing Authorization to Unauthenticated Information Disclosure
Error Log Viewer <= 1.1.2 - Sensitive Information Exposure
Exposure of Sensitive Information to an Unauthorized Actor in Ecomiz - Survey TMA module for PrestaShop
Improper neutralization of SQL parameter in Ether Création - Generate barcode on invoice / delivery slip module for PrestaShop
Improper Access Control in moodle
Authorization Bypass in moodle
Improper Access Control in moodle
Uncontrolled Resource Consumption in moodle
Improper Handling of Parameters in moodle
Cross-Site Request Forgery in moodle
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
Cross-site Scripting in Serenity
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization
Formidable Registration <= 2.11 - Authenticated (Contributor+) Arbitrary User Password Reset To Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.