Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,407
Reset filtersdrupal/cache_utility - SA-CONTRIB-2025-019
drupal/spamspan - SA-CONTRIB-2025-016
drupal/google_tag - SA-CONTRIB-2025-011
drupal/matomo - SA-CONTRIB-2025-008
drupal/gdpr - SA-CONTRIB-2025-018
drupal/google_tag - SA-CONTRIB-2025-012
drupal/ai - SA-CONTRIB-2025-022
drupal/ai - SA-CONTRIB-2025-003
drupal/ai - SA-CONTRIB-2025-004
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings
Sylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal Checkout
Clickstorm SEO Allows Cross-Site Scripting (XSS)
Additional TCA Allows Cross-Site Scripting (XSS)
TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function
TastyIgniter Has an Incorrect Access Control Vulnerability
Sylius PayPal Plugin Payment Amount Manipulation Vulnerability
MODX allows cross-site scripting (XSS) via an SVG file
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Pimcore Vulnerable to SQL Injection in getRelationFilterCondition
Froxlor has an HTML Injection Vulnerability
Froxlor allows Multiple Accounts to Share the Same Email Address Leading to Potential Privilege Escalation or Account Takeover
The SimpleSAMLphp SAML2 library incorrectly verifies signatures for HTTP-Redirect binding
REDAXO allows Authenticated Reflected Cross Site Scripting - packages installation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.