Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Download Manager <= 3.2.82 - Unauthenticated Password Leak
Social Share Buttons & Analytics Plugin – GetSocial.io <= 4.3.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Database for CF7 <= 1.2.4 - Missing Authorization via wpcf7db_delete AJAX action
Responsive Lightbox <= 2.4.5 - Authenticated (Author+) Stored Cross-Site Scripting via name
Adifier (Premium Theme) < 3.1.4 - Reflected Cross-Site Scripting
MSync <= 1.0.0 - Authenticated (Administrator+) SQL Injection
NextScripts <= 4.4.2 - Reflected Cross-Site Scripting via code
GDPR Cookie Consent by Supsystic <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
KP Fastest Tawk.to Chat <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Validation of SignedInfo
Apache Tomcat Improper Input Validation vulnerability
Apache Superset Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Apache Superset Open Redirect vulnerability
Apache Superset Allocation of Resources Without Limits or Throttling vulnerability
Apache ActiveMQ Deserialization of Untrusted Data vulnerability
ureport arbitrary file read vulnerability
Reactor Netty HTTP Server denial of service vulnerability
Spring Framework vulnerable to denial of service
Spring Boot Actuator denial of service vulnerability
Improper Neutralization of Input in Advanced User Interface for Jolt
Razorpay for WooCommerce <= 4.5.6 - Missing Authorization
Bravo Translate <= 1.2 - Authenticated (Administrator+) SQL Injection
JetFormBuilder <= 3.1.4 - Unauthenticated Content Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.