Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
LWS Cleaner <= 2.3.0 - Cross-Site Request Forgery
Template Debugger <= 3.1.2 - Cross-Site Request Forgery
Who Hit The Page – Hit Counter <= 1.4.14.3 - Reflected Cross-Site Scripting
WP Backup Manager <= 1.13.1 - Reflected Cross-Site Scripting
Seed Fonts 2.3.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
LWS Tools <= 2.4.1 - Cross-Site Request Forgery
Recent Posts Slider <= 1.1 - Cross-Site Request Forgery
Sermon'e <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Magento Open Source affected by Improper Input Validation
Magento Open Source allows Improper Neutralization of Special Elements Used
Magento Open Source allows Incorrect Authorization
Magento Open Source allows Incorrect Authorization
Magento Open Source has Business Logic Errors Vulnerability
Magento Open Source affected by Improper Input Validation
Magento Open Source allows Server-Side Request Forgery (SSRF)
Magento Open Source allows Server-Side Request Forgery (SSRF)
Magento Open Source allows Incorrect Authorization
Magento Open Source allows XML Injection
Magento Open Source allows Incorrect Authorization
Magento Open Source allows Information Exposure
fast-xml-parser regex vulnerability patch could be improved from a safety perspective
snappy-java's unchecked chunk length leads to DoS
snappy-java's Integer Overflow vulnerability in compress leads to DoS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.