Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Organization chart <= 1.4.1 - Cross-Site Request Forgery
Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library
Temporary File Information Disclosure vulnerability in MPXJ
Jeecg-boot vulnerable to SQL Injection
Jeecg-boot vulnerable to SQL Injection
Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString
Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin
Browsershot vulnerable to Cross-Site Scripting (XSS)
Browsershot does not validate URL protocols passed to Browsershot URL method
Badaso vulnerable to Remote Code Execution (RCE)
Browsershot version 3.57.3 vulnerable to improper input validation
Microweber vulnerable to cross-site scripting (XSS)
PyroCMS vulnerable to stored Cross Site Scripting
Heap buffer overflow in GPU
WP Clictracker <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Kenta Gutenberg Blocks <= 1.0.7 - Missing Authorization
Return Refund and Exchange For WooCommerce <= 4.0.8 - Arbitrary File Upload
Content Repeater – Custom Posts Simplified <= 1.1.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Community Events <= 1.4.8 - Authenticated (Administrator+) Stored Cross Site Scripting
Apache Dolphin Scheduler has insufficiently protected credentials
wger vulnerable to brute force attempts
Quizlord <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP ULike <= 4.6.4 - Race Condition
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.