Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Identity Spoofing in libp2p-secio
Denial of Service in rgb2hex
Bold Page Builder <= 2.3.1 - Missing Authorization to Settings Update
WooCommerce Address Book < 1.6.0 - Cross-Site Request Forgery
NLTK Vulnerable To Path Traversal
jDownloads - SQL Injection
assign-deep Vulnerable to Prototype Pollution
drupal/imagecache_external - SA-CONTRIB-2019-065
Variation Swatches for WooCommerce <= 1.0.61 - Reflected Cross-Site Scripting
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks
Sender by BestWebSoft <= 1.2.0 - Reflected Cross-Site Scripting
Additional Variation Images Gallery for WooCommerce <= 1.1.28 - Authenticated Stored Cross-Site Scripting
Easy Property Listings <= 3.3.3 - Cross-Site Scripting
Vulnerability in Azure Active Directory Authentication Library
Cross-site scripting in Apache Ranger
Option Tree <= 2.5.5 - Cross-Site Scripting
kunena - XSS (Cross Site Scripting)
drupal/forms_steps - SA-CONTRIB-2019-064
drupal/elf - SA-CONTRIB-2019-063
drupal/super_login - SA-CONTRIB-2019-062
All In One WP Security & Firewall <= 4.0.8 - SQL Injection
Contact Form by BestWebSoft – Advanced Contact Us Form Builder for WordPress <= 4.0.1 - Cross-Site Scripting
Easy Drag And drop All Import : WP Ultimate CSV Importer <= 5.6 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.