Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Super Socializer <= 7.13.53 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email
WPSchoolPress <= 2.2.3 - Missing Authorization
Shortcode IMDB <= 6.0.8 - Cross-Site Request Forgery
All In One WP Security 5.1.9 - Plaintext Storage of Credentials
Improper neutralization of several SQL parameters in vivawallet module for PrestaShop
Whatsapp-Chat-Exporter has Cross-Site Scripting vulnerability in HTML output of chats.
ckeditor-wordcount-plugin vulnerable to Cross-site Scripting in Source Mode of Editor
Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller
XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
sweetalert2 contains potentially undesirable behavior
Apache MINA SSHD information disclosure vulnerability
Apache Camel information exposure vulnerability
TeamPass Cross-site Scripting vulnerability
Wallabag vulnerable to Allocation of Resources Without Limits or Throttling
HTTP Headers <= 1.18.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Premium Addons PRO <= 2.9.0 - Sensitive Information Exposure
JetFormBuilder <= 3.0.8 - Authenticated (Author+) Privilege Escalation
Twittee Text Tweet <= 1.0.8 - Reflected Cross-Site Scripting
Premium Addons PRO <= 2.9.0 - Missing Authorization
WDS Multisite Aggregate <= 1.0.0 - Reflected Cross-Site Scripting
Terms Descriptions <= 3.4.4 - Reflected Cross-Site Scripting via term_search
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.