Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Alter <= 1.0 - Cross-Site Request Forgery
Thumbnail Slider With Lightbox <= 1.0 - Cross-Site Request Forgery to Arbitrary File Upload
Current Menu Item for Custom Post Types <= 1.5 - Cross-Site Request Forgery
WP Hotel Booking <= 2.0.7 - Unauthenticated SQL Injection
Thumbnail carousel slider <= 1.0 - Cross-Site Request Forgery to Mass Slider Deletion
LogDash Activity Log <= 1.1.3 - Unauthenticated SQL Injection
Feather Login Page <= 1.1.3 - Cross-Site Request Forgery
WP Knowledgebase <= 1.3.4 - Cross-Site Request Forgery
Original texts Yandex WebMaster <= 1.18 - Cross-Site Request Forgery
WP Hotel Booking <= 2.0.8 - Insufficient Authorization to Unauthorized Post Deletion
EasyRecipe <= 3.5.3251 - Cross-Site Request Forgery
Animated Counters <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion
Improper Access Control in the superuser module edited by idnovate for PrestaShop
Improper neutralization of SQL parameter in HDclic - PrestaBlog module for PrestaShop
Improper neutralization of SQL parameter in Bl Modules - CSV Feeds PRO module for PrestaShop
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
twisted.web has disordered HTTP pipeline response
crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages
XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled
XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title
XWiki Platform XSS vulnerability from account in the create page form via template provider
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.