Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Google Forms <= 0.93 - Remote Code Execution
Admin Tools Pro - Information Disclosure
Tagregator <= 0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Ansible fails to cache SSH host keys
WF Cookie Consent <= 1.1.3 - Cross-Site Scripting
PixelYourSite <= 5.2.1 - Reflected Cross-Site Scripting
Events Manager <= 5.8.1.3 - Stored Cross-Site Scripting
Form Maker by 10Web <= 1.12.21 - CSV Injection
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps < 4.0.4 - Cross-Site Scripting
Open Graph and Twitter Card Tags < 2.2.4.1 - Reflected Cross-Site Scripting
Prototype Pollution in hoek
drupal/jsonapi - SA-CONTRIB-2018-021
drupal/drd_agent - SA-CONTRIB-2018-022
Drupal Core Remote Code Execution Vulnerability
Cross-Site Scripting in @risingstack/protect
Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
Responsive Cookie Consent < 1.8 - Cross-Site Scripting
VRView <= 1.1.3 and WP-VR-view <= 1.6 - Reflected Cross-Site Scripting
WD Instagram Feed <= 1.3.0 - Cross-site scripting
Ultimate Member <= 2.0.6 - Multiple Cross-Site Request Forgery Issues
WD Instagram Feed Premium <= 1.3.0 - Cross-Site Scripting
Ultimate Member <= 2.0.10 - Authenticated Cross-Site Scripting
Catapult UK Cookie Consent <= 2.3.9 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.