Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Download Manager <= 3.3.52 - Missing Authorization
Checkout for PayPal <= 1.0.46 - Missing Authorization
Greenly <= 8.1 - Authenticated (Contributor+) Local File Inclusion
Ally <= 4.0.2 - Missing Authorization
MK Google Directions <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Court Reservation <= 1.10.11 - Missing Authorization
Emphires <= 3.9 - Authenticated (Contributor+) Local File Inclusion
GLB <= 1.2.2 - Missing Authorization
WP-Lister Lite for eBay <= 3.8.5 - Missing Authorization
Nelio AB Testing <= 8.2.4 - Authenticated (Editor+) SQL Injection
Video Conferencing with Zoom < 4.6.6 - Missing Authorization
Visual Link Preview <= 2.3.0 - Authenticated (Contributor+) Server-Side Request Forgery
ShipTime: Discounted Shipping Rates <= 1.1.4 - Missing Authorization
iZooto <= 3.7.20 - Missing Authorization
SmartFix < 1.2.4 - Missing Authorization
Fabric.js Affected by Stored XSS via SVG Export
OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injection
OpenClaw hardened the skill download target directory validation
OpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreation
OpenClaw session tool visibility hardening and Telegram webhook secret fallback
OpenClaw: Telegram bot token exposure via logs
OpenClaw: Docker container escape via unvalidated bind mount config injection
OpenClaw: Unsanitized CWD path injection into LLM prompts
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.