Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Server-Side Request Forgery in mindsdb
Popup Builder <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting
WP TripAdvisor Review Slider <= 11.8 - Authenticated (Admin+) Stored Cross-Site Scripting
affiliate-toolkit <= 3.4.2 - Unauthenticated Server-Side Request Forgery
Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
Cross-site Scripting in Semantic MediaWiki
Directory Traversal in JFinalCMS
PHPEMS Deserialization of Untrusted Data vulnerability
CommentTweets <= 0.6 - Cross-Site Request Forgery to Settings Update
Authorization bypass in Quarkus
Local Privilege Escalation in Windows
SlickNav Mobile Menu <= 1.9.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Directory Traversal in evershop
Code execution in evershop
Cross-site Scripting in evershop
Directory Traversal in evershop
Cross-site Scripting in evershop
Cross Site Scripting in evershop
Directory Traversal in evershop
dbt-core's secret env vars written to package-lock.json in plaintext
Cross-site Scripting in JFinalCMS
Cross-site Scripting in JFinalCMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.