Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersdrupal/webform - SA-CONTRIB-2026-173
drupal/webform - SA-CONTRIB-2026-172
drupal/webform - SA-CONTRIB-2026-171
drupal/webform - SA-CONTRIB-2026-170
drupal/webform - SA-CONTRIB-2026-169
drupal/webform - SA-CONTRIB-2026-168
drupal/webform - SA-CONTRIB-2026-167
drupal/webform - SA-CONTRIB-2026-166
drupal/webform - SA-CONTRIB-2026-165
drupal/webform - SA-CONTRIB-2026-164
drupal/webform - SA-CONTRIB-2026-163
drupal/webform - SA-CONTRIB-2026-162
drupal/webform - SA-CONTRIB-2026-161
drupal/webform - SA-CONTRIB-2026-160
drupal/webform - SA-CONTRIB-2026-159
drupal/webform - SA-CONTRIB-2026-158
drupal/webform - SA-CONTRIB-2026-155
drupal/webform - SA-CONTRIB-2026-154
Solspace Freeform: Limited Twig template injection via submitted field values
WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost
REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates
REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames
REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.