Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Exposure of Sensitive Information to an Unauthorized Actor in MyPrestaModules - Orders (CSV, Excel) Export PRO module for PrestaShop
Improper neutralization of SQL parameter in Best-Kit - Pop-up / Schedule Popup / Splash window module for PrestaShop
Bagisto vulnerable to Insecure Direct Object Reference (IDOR)
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
Remote Denial of Service Vulnerability in Microsoft QUIC
In Quarkus, git credentials could be inadvertently published
JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget
PropertyHive <= 2.0.9 - Authenticated (Subscriber+) PHP Object Injection
DSGVO All in one for WP <= 4.3 - Cross-Site Request Forgery
AntiSpam for Contact Form 7 <= 0.6.0 - Reflected Cross-Site Scripting
APIExperts Square for WooCommerce <= 4.2.9 - Reflected Cross-Site Scripting
Cryptocurrency Widgets – Price Ticker & Coins List <= 2.6.8 - Missing Authorization
Quiz And Survey Master <= 8.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget
Premmerce Permalink Manager for WooCommerce <= 2.3.10 - Unauthenticated Local File Inclusion
wp-mpdf <= 3.7.1 - Reflected Cross-Site Scripting
Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget
WP SendFox <= 1.3.0 - Missing Authorization
Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting
WP Fusion Lite <= 3.41.24 - Authenticated (Contributor+) Remote Code Execution
Advanced Sermons <= 3.2 - Reflected Cross-Site Scripting
Email Subscription Popup <= 1.2.20 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.