Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Liferay Portal allows attackers to discover the existence of sites
Liferay Portal's account lockout does not invalidate existing user sessions
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) User Meta Disclosure
All 404 Pages Redirect to Homepage <= 1.9 - Unauthenticated Stored Cross-Site Scripting
Honeypot for WP Comment <= 2.2.3 - Directory Traversal to Unauthenticated Arbitrary File Deletion
Event Tickets and Registration <= 5.8.0 Events Tickets Plus <= 5.9.0 - Authenticated (Contributor+) Information Exposure
Internal Link Juicer <= 2.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting
InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure
Events Tickets Plus <= 5.9.0 - Missing Authorization to Information Exposure
Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service
Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export
All In One WP Security <= 5.2.6 - Cross-Site Request Forgery to IP Blocking
Passster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure
Improper neutralization of SQL parameter in Opart Easy Redirect for PrestaShop
Improper neutralization of SQL parameter in InnovaDeluxe - Manufacturer or supplier alphabetical search module for PrestaShop
Improper neutralization of SQL parameter in Presta Monster - Multi Accessories Pro module for PrestaShop
Improper neutralization of SQL parameter in Boostmyshop module for PrestaShop
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Graylog session fixation vulnerability through cookie injection
Graylog vulnerable to instantiation of arbitrary classes triggered by API request
drupal/migrate_tools - SA-CONTRIB-2024-008
CKEditor cross-site scripting vulnerability in AJAX sample
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.