Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Subscriber+ Arbitrary Affiliate Links Creation
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Authorization Bypass and Cross-Site Request Forgery
Opensea <= 1.0.2 - Cross-Site Scripting
SQL Injection in Pimcore
Improper Neutralization of Formula Elements in a CSV File in Kimai 2
Social comments by WpDevArt <= 2.4.9 - Admin+ Stored Cross-Site Scripting
Thank Me Later <= 3.3.4 - Admin+ Stored Cross-Site Scripting
Page Restriction WordPress <= 1.2.6 - Admin+ Stored Cross-Site Scripting
Menubar <= 5.7.2 - Reflected Cross-Site Scripting
Coming Soon by Supsystic <= 1.7.5 - Reflected Cross-Site Scripting
Text Hover <= 4.1 - Admin+ Stored Cross-Site Scripting
Pricing Table by Supsystic <= 1.9.4 - Reflected Cross-Site Scripting
Easy Digital Downloads <= 2.11.5 - Cross-Site Request Forgery
Easy Google Maps <= 1.9.31 - Reflected Cross-Site Scripting
SQL Injection in elide-datastore-aggregation
Unauthenticated user can list hidden document from multiple velocity templates in XWiki
Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx
Unauthenticated user can retrieve the list of users through uorgsuggest.vm
Infinite loop in .Net Bond
elFinder Unrestricted File Upload vulnerability
Path traversal in Hadoop
DW Question & Answer Pro <= 1.3.6 - Missing Authorization Checks
Advanced Page Visit Counter <= 6.1.5 - Subscriber+ Blind SQL injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.