Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Social Rocket <= 1.2.9 - Cross-Site Request Forgery
TC Custom JavaScript <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting
Cross-Site Scripting in Wagtail
Command injection in codecov (npm package)
Careerfy <= 4.2.0 - Reflected Cross-Site Scripting
JobSearch WP Job Board < 1.5.5 - Reflected Cross-Site Scripting
Possible pod name collisions in jupyterhub-kubespawner
Stored XSS in Apache Airflow
Multiple stored XSS in RBAC Admin screens in Apache Airflow
Insecure default config of Celery worker in Apache Airflow
Command injection via Celery broker in Apache Airflow
Remote code execution (RCE) in Apache Airflow
GreenMart – Organic & Food WooCommerce WordPress Theme < 2.4.3 - Reflected Cross-Site Scripting
JetBackup – WP Backup, Migrate & Restore <= 1.3.9 - Cross-Site Request Forgery to Arbitrary File Upload
Icegram Email Subscribers & Newsletters <= 4.5.0 - Authenticated SQL Injection
All in One SEO Pack <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CMS2CMS - 2.00 permissions
WordPress Core < 5.8.1 - LoDash Update
Broken access control on files
freewvs's nested directory structure can interrupt scan
freewvs vulnerable to denial of service through large files
Email Verification for WooCommerce <= 1.8.1 - Authentication Bypass
js jobs - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.