Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Silverpeas Core Username Enumeration Vulnerability
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read
SureForms – Drag and Drop Form Builder for WordPress <= 1.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Catwalk <= 1.4 - Unauthenticated Local File Inclusion
EcoGrow <= 1.7 - Unauthenticated Local File Inclusion
Rally <= 1.1 - Unauthenticated Local File Inclusion
Algenix <= 1.0 - Unauthenticated Local File Inclusion
Today's Date Inserter <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alright <= 1.6.1 - Unauthenticated Local File Inclusion
Convex <= 1.11 - Unauthenticated Local File Inclusion
Easy Flash Embed <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smash <= 1.7 - Unauthenticated Local File Inclusion
Athos <= 1.9 - Unauthenticated Local File Inclusion
Vayu Blocks <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Block Attributes
Beautique <= 1.5 - Unauthenticated Local File Inclusion
RockON DJ <= 3.3 - Reflected Cross-Site Scripting
Legacy <= 1.9 - Unauthenticated Local File Inclusion
Harper <= 1.13 - Unauthenticated Local File Inclusion
Paragon <= 1.1 - Unauthenticated Local File Inclusion
Rentic <= 1.1 - Unauthenticated Local File Inclusion
Hygia <= 1.16 - Unauthenticated Local File Inclusion
Good Mood <= 1.16 - Unauthenticated Local File Inclusion
PostX <= 4.1.36 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.