Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
X-Forwarded-For header allows brute-forcing autoblocked IP addresses
Appwrite Server-Side Request Forgery vulnerability
OpenAPI Generator vulnerable to Server-Side Request Forgery
jeecg-boot vulnerable to improper authentication
zstd vulnerable to buffer overrun
Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Pimcore Cross-site Scripting in Predefined Asset Metadata module in Settings
pimcore is vulnerable to cross-site scripting in translate module
phpMyFAQ Stored Cross-site Scripting vulnerability
phpMyFAQ Stored Cross-site Scripting vulnerability
phpMyFAQ Cross-site Scripting vulnerability
phpMyFAQ vulnerable to improper input validation
phpMyFAQ has weak password requirements
thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management
phpMyFAQ Code Injection vulnerability
jeecg-boot vulnerable to SQL injection
Order date time for WooCommerce <= 3.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Health Check & Troubleshooting <= 1.5.1 - Cross-Site Request Forgery via health_check_troubleshoot_get_captures
Really Simple Google Tag Manager <= 1.0.6 - Cross-Site Request Forgery via plugin_activation
Coupon Affiliates <= 5.4.3 - Unauthenticated Stored Cross-Site Scripting
Responsive Vertical Icon Menu <= 1.5.8 - Reflected Cross-Site Scripting via 'id'
Welcome Bar <= 2.0.3 - Missing Authorization
Welcome Bar <= 2.0.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.