Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Easy Testimonials <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mega Main Menu <= 2.2.2 - Information Disclosure
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation
mercurius has Uncaught Exception when using subscriptions
PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash
@okta/oidc-middlewareOpen Redirect vulnerability
Apiman Manager API affected by Jackson denial of service vulnerability
Luxon Inefficient Regular Expression Complexity vulnerability
debug Inefficient Regular Expression Complexity vulnerability
Apache Sling App CMS vulnerable to reflected Cross-site Scripting
Information Cards Module vulnerable to Cross-site Scripting
wifey vulnerable to Command Injection due to improper input sanitization
WPDating <= 7.4.1 - Arbitrary File Upload
Barzahlen Payment Module PHP SDK vulnerable to Observable Timing Discrepancy
WebPA SQL Injection vulnerability
SUKOHI Surpass Path Traversal vulnerability
PaginationServiceProvider SQL Injection vulnerability
Baobab vulnerable to Prototype Pollution
Symbiote Seed Open Redirect vulnerability
kelvinmo simplexrd vulnerable to Improper Restriction of XML External Entity Reference
terminal-kit Inefficient Regular Expression Complexity vulnerability
Exclusive Addons for Elementor <= 2.6.1 - Cross-Site Request Forgery
globalpom-utils has Insecure Temporary File
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.