Critical
CVE-2021-26599
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Medium
CVE-2021-26598
Incorrect Access Control in ImpressCMS
Critical
CVE-2021-46433
Sandbox bypass in fenom
Medium
CVE-2022-26980
Cross-site Scripting in teampass
Medium
CVE-2022-0363
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Critical
CVE-2022-0782
Donations <= 1.8 - Unauthenticated SQL Injection
Critical
CVE-2022-0541
FloLaunch <= 2.4 - Missing Authorization
Medium
CVE-2022-1092
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
High
CVE-2022-24303
Path traversal in Pillow
Medium
CVE-2022-0879
Caldera Forms <= 1.9.6 - Reflected Cross-Site Scripting via cf-api
Medium
CVE-2021-25094
Tatsu <= 3.3.12 - Unauthenticated Remote Code Execution
Medium
46258dc2-3e05-4050-baad-3b3ded912bfe
Shopping Cart & eCommerce Store <= 5.2.4 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-0706
Easy Digital Downloads <= 2.11.5 - Admin+ Cross-Site Scripting
Critical
3ed280ba-d7e5-4637-ab84-93dc82c009d8
Admin Word Count Column <= 2.2 - Arbitrary File Read
Low
CVE-2019-9942
Twig Sandbox Information Disclosure
High
CVE-2019-18887
Symfony Http-Kernel has non-constant time comparison in UriSigner
Critical
CVE-2020-13756
Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()
Medium
CVE-2020-26138
FormField with square brackets in field name skips validation
High
CVE-2019-10905
Parsedown Class-Name Injection
High
ghsa-3988-h75v-hwf6
Arbitrary shell execution
High
ghsa-mhfv-8rc9-w38c
Arbitrary shell execution
Medium
CVE-2022-25576
Cross-Site Request Forgery in Anchor CMS
Critical
CVE-2021-43090
Improper Restriction of XML External Entity Reference in soa-model
High
CVE-2022-1064
SQL Injection in Fork CMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.