Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Path Traversal in Ghost
AzuraCast missing brute force prevention
Uncontrolled Resource Consumption in OPC UA .NET Standard Reference Server
Exposure of Sensitive Information in OPC UA .NET Standard Reference Server
ONOS vulnerable to Cross-site Scripting
TheGem < 5.8.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
TK Google Fonts GDPR Compliant <= 2.2.7 - Authorization Bypass
Cryptocurrency Donation Box – Bitcoin & Crypto Donations <= 2.2.7 - Authenticated (Administrator+) SQL Injection
WP Job Portal <= 2.0.1 - Cross-Site Request Forgery to Settings Modification
Easy Appointments <= 3.11.9 - Cross-Site Request Forgery via multiple AJAX actions
Points and Rewards for WooCommerce <= 1.5.0 - Cross-Site Request Forgery to Settings Change
Community by PeepSo <= 6.0.9.0 - Missing Authorization to Sensitive Information Exposure
WPO365 | Mail Integration for Office 365 / Outlook <= 1.9.0 - reflected Cross-Site Scripting via error_description
Points and Rewards for WooCommerce <= 1.5.0 - Missing Authorization
TheGem < 5.8.1.1 - Improper Authentication
Cross-site scripting in TotalJS
Server-side template injection in beetl
Multi Rating <= 5.0.6 - Missing Authorization to Arbitrary Ratings Value Change
Advanced Custom Fields (Free and Pro) 5.8.10 to 5.12.5 & 6.0.0 to 6.1.5 - Reflected Cross-Site Scripting via 'post_status'
Hostel <= 1.1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Manage Bookings
Manager for Icomoon <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Multi Rating <= 5.0.6 - Cross-Site Request Forgery to Arbitrary Ratings Value Change
DX Delete Attached Media <= 2.0.2 - Missing Authorization to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.