Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
SQL Injection in Jeecg-boot
SQL Injection in Jeecg-boot
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via platform
Profile Builder - User Profile & User Registration Forms <= 3.6.1 - Cross-Site Scripting via site_url Parameter
ARI Stream Quiz – WordPress Quizzes Builder <= 1.2.26 - Reflected Cross-Site Scripting
Kunze Law < 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Sync QCloud COS Plugin < 2.0.1 - Authenticated (Admin+) Cross-Site Scripting
Contact Form 7 Connector <= 1.1.13 - Reflected Cross-Site Scripting
ARI Fancy Lightbox <= 1.3.8 - Reflected Cross-Site Scripting
UpdraftPlus WordPress Backup Plugin < 1.22.3 - Sensitive Information Disclosure
Server crash if running Python 3.10 w/ Sanic 20.12
drupal/quickedit - SA-CONTRIB-2022-025
Drupal core - SA-CORE-2022-004
Drupal core - SA-CORE-2022-003
Simple Ajax Chat <= 20220115 - Unauthenticated Stored Cross-Site Scripting
WP Content Copy Protection <= 3.4.4 - Cross-Site Request Forgery to Setting Update
Improper Access Control in librenms
Improper Authorization in librenms
Missing Authorization in librenms/librenms
Cross-site Scripting in librenms
Microweber vulnerable to Improper Validation of Specified Quantity in Input
Open redirect in microweber
Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.