Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Envira Gallery Lite <= 1.8.3.2 - Cross-Site Scripting
Cross-site Scripting in dompurify
OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input valida
MPXJ path Traversal vulnerability
Code Injection in mquery
Command Injection in corenlp-js-interface
Simple Social Media Share Buttons <= 3.2.0 - Reflected Cross-Site Scripting
Command injection in connection-tester
datatables.net vulnerable to Prototype Pollution due to incomplete fix
Contact Form 7 <= 5.3.1 - Arbitrary File Upload via Bypass
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation
Simple Social Media Share Buttons <= 3.1.1 - Reflected Cross-Site Scripting
WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery to Arbitrary File Upload
WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery
Command Injection Vulnerability in systeminformation
Denial of Service in ecstatic
Gutenberg Template Library & Redux Framework <= 4.1.23 - Cross-Site Request Forgery
Denial of Service in i18n
SSRF vulnerability in Apache Airflow
Apache Airflow logs passwords in plaintext
Limit Login Attempts Reloaded <= 2.15.2 - Reflected Cross-Site Scripting
Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.