Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,686
lockfile-lint-api Vulnerable to Incorrect Behavior Order
Meteor Affected By Inefficient Regular Expression Complexity
WP Tabs <= 2.2.12 - Authenticated (Administrator+) PHP Object Injection
Tainacan <= 0.21.14 - Unauthenticated Arbitrary File Deletion
Wise Chat <= 3.3.3 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG
EventON <= 2.4.4 - Missing Authorization
6Storage Rentals <= 2.19.4 - Missing Authorization
Spotlight - Social Media Feeds (Premium) <= 1.7.1 - Unauthenticated Information Exposure
Facturante <= 1.11 - Unauthenticated SQL Injection
Sticky HTML5 Music Player <= 3.1.6 - Authenticated (Contributor+) SQL Injection
WP Notes Widget <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Link Directory Pro < 14.8.1 - Missing Authorization
Sticky Radio Player <= 3.4 - Authenticated (Contributor+) SQL Injection
Seven Stars <= 1.4.4 - Cross-Site Request Forgery
WP JobHunt <= 7.1 - Unauthenticated Insecure Direct Object Reference
MapSVG <= 8.5.34 - Unauthenticated Arbitrary Shortcode Execution
EventON (Pro) <= 4.9.9 - Missing Authorization
Short URL <= 1.6.8 - Authenticated (Subscriber+) SQL Injection
CSS3 Accordions for WordPress <= 3.0 - Missing Authorization
WordPress Events Calendar Registration & Tickets <= 2.6.0 - Unauthenticated PHP Object Injection
Broadstreet <= 1.51.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Push notification for Mobile and Web app <= 2.0.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.