Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
ListingPro <= 2.9.9 - Missing Authorization
ListingPro Lead Form <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
BuddyForms <= 2.9.0 - Missing Authorization
Sendle Shipping <= 6.02 - Missing Authorization
Attesa Extra <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Raychat <= 2.2.1 - Cross-Site Request Forgery
Business Directory <= 6.4.18 - Missing Authorization
ListingPro <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
WebinarPress <= 1.33.28 - Missing Authorization
百度站长SEO合集(支持百度/神马/Bing/头条推送) <= 2.1.4 - Missing Authorization
Headline Analyzer <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
ListingPro Lead Form <= 1.0.2 - Missing Authorization
Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system
Cargo Mediawiki Extension vulnerable to Cross-site Scripting
Rehub < 19.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stockholm <= 9.14.1 - Authenticated (Contributor+) Local File Inclusion
Revolution < 2.5.8 - Authenticated (Subscriber+) Local File Inclusion
RTMKit <= 1.6.5 - Authenticated (Contributor+) Arbitrary File Upload
Stockholm <= 9.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Local File Inclusion
NextMove Lite <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
DirectoryPress <= 3.6.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Eduma <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.