Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Keycloak vulnerable to privilege escalation on Token Exchange feature
OutOfMemory Exception by specifically crafted processing instruction in NekoHtml Parser
Psychological tests & quizzes <= 0.21.19 - Authenticated (Contributor+) Cross-Site Scripting
Page Compare Reflected Cross-site Scripting (XSS) vulnerability
Psychological tests & quizzes <= 0.21.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 5.1.4 - Unauthenticated Stored Cross-Site Scripting
Cross site scripting in facturascripts
element-plus vulnerable to cross-site scripting (XSS) via el-table-column
ejs template injection vulnerability
Liferay Portal and Liferay DXP allows arbitrary injection via web content template names
Liferay Portal and Liferay DXP allows arbitrary injection via the site name
Command injection in czproject/git-php
Slider by 10Web <= 1.2.51 - Admin+ Stored Cross-Site Scripting
Donate Extra <= 2.0.2 - Reflected Cross-Site Scripting
Vertical scroll recent post <= 13.8 - Reflected Cross-Site Scripting
Melhor Envio <= 2.11.19 - Cross-Site Request Forgery and Authenticated Settings Change
MyAlice – Live Chat, WhatsApp, Facebook Messenger, Instagram, & Chatbot for WooCommerce <= 1.2.7 - Stored Cross-Site Scripting
RSVPMaker <= 9.2.5 - Unauthenticated SQL Injection
Turn off all comments <= 1.0 - Reflected Cross-Site Scripting
Gwyn's Imagemap Selector <= 0.3.3 - Reflected Cross-Site Scripting
Potential Captcha Validate Bypass in flask-session-captcha
ShortPixel Adaptive Images <= 3.3.1 - Subscriber+ Arbitrary Settings Update
Stored cross-site scripting in Snipe-IT
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.