Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Edit Password Protected <= 1.3.4 - Unauthenticated Protection Bypass
Site Offline <= 1.5.7 - Missing Authorization
Voting Contest <= 5.8 - Missing Authorization
Kento Splash Screen <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
BlogMarks < 1.1.2 - Unauthenticated Local File Inclusion
e-Boekhouden.nl <= 1.9.3 - Reflected Cross-Site Scripting
Apache Tika XXE Vulnerability via Crafted XFA File Inside a PDF
Liferay Portal Vulnerable to Cross-Site Scripting in Dynamic Data Mapping
Liferay Portal Vulnerable to Cross-Site Scripting via DDMPortlet_definition Parameter
Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability
x402 SDK vulnerable in outdated versions in resource servers for builders
Bible SuperSearch <= 6.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via selector_height Parameter
WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy
n8n symlink traversal vulnerability in "Read/Write File" node allows access to restricted files
Directus allows unauthenticated file upload and file modification due to lacking input sanitization
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Inspiro <= 2.1.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation
GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update
Liferay Portal Vulnerable to Cross-Site Request Forgery
elysia-cors Origin Validation Error
Liferay Portal Unvalidated File Upload
Liferay Portal Unauthenticated File Access via URL
Liferay Portal Vulnerable to Cross-Site Scripting through URLs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.