Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Trix has a stored XSS vulnerability through its attachment attribute
serverless MCP Server vulnerable to Command Injection in list-projects tool
libsodium has Incomplete List of Disallowed Inputs
CBORDecoder reuse can leak shareable values across decode calls
QuadLayers TikTok Feed <= 4.6.4 - Missing Authorization
Knowledge Base documentation & wiki plugin – BasePress <= 2.17.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Everest Backup <= 2.3.9 - Cross-Site Request Forgery
MX Time Zone Clocks <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
MoveMe <= 1.2.15 - Unauthenticated Local File Inclusion
Portfolio Gallery <= 1.4.8 - Missing Authorization
Gerencianet Oficial <= 3.1.3 - Unauthenticated Information Exposure
Post Signature <= 0.4.1 - Authenticated (Author+) Stored Cross-Site Scripting
Tasty Recipes Lite <= 1.1.5 - Missing Authorization
Custom Style <= 1.0 - Cross-Site Request Forgery
FormFacade <= 1.4.1 - Cross-Site Request Forgery
Serial Codes Generator and Validator with WooCommerce Support <= 2.8.2 - Missing Authorization
AI Copilot <= 1.4.7 - Missing Authorization
Tails <= 1.4.12 - Unauthenticated Local File Inclusion
Hide Plugins <= 1.0.4 - Missing Authorization
Sound | Musical Instruments Online Store <= 1.6.9 - Unauthenticated PHP Object Injection
Wiremo <= 1.4.99 - Missing Authorization
Recent Posts From Each Category <= 1.4 - Cross-Site Request Forgery
Graphist <= 1.2.10 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.