Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Ultimate Viral Quiz <= 1.0 - Cross-Site Request Forgery to Settings Update
SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure
Auto Bulb Finder for WordPress <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
A Simple Multilanguage Plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
MPWizard – Create Mercado Pago Payment Links <= 1.2.1 - Cross-Site Request Forgery to Arbitrary Post Deletion
AP Background <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
AP Background <= 3.8.2 - Cross-Site Request Forgery
AP Background 3.8.1 - 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload via advParallaxBackAdminSaveSlider Function
Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean
Spirit Framework <= 1.2.14 - Authentication Bypass to Account Takeover and Privilege Escalation
Apache Kylin Authentication Bypass Vulnerability
Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability
Apache Kylin Files or Directories Accessible to External Parties
Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Cross-Site Request Forgery
Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Customify <= 0.4.11 - Cross-Site Request Forgery
Jock On Air Now (JOAN) <= 6.0.4 - Missing Authorization
Backup Bolt <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download
Interactive Medical Drawing of Human Body <= 2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECT_DOMAINS is
Dolibarr vulnerable to RCE via the computed field parameter
Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import
laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.