Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Plugin for Google Reviews <= 2.2.2 - Missing Authorization
Plugin for Google Reviews <= 2.2.2 - Cross-Site Request Forgery
SVG Support 2.5 - 2.5.1 - Insecure Plugin Defaults to Cross-Site Scripting
Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery
Donation Button <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Donation Button <= 4.0.0 - Missing Authorization
Easy Form Builder <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Quiz and Survey Master <= 8.0.4 - Improper Input Validation
WooCommerce Shipping – DPD baltic <= 1.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery
Apache Archiva subject to arbitrary directory deletion by users.
Apache Archiva vulnerable to Sensitive Information Disclosure via anonymous user
Concrete CMS vulnerable to Reflected Cross-site Scripting
Concrete CMS vulnerable to Reflected Cross-site Scripting via image manipulation library
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information
Concrete CMS vulnerable to Uncontrolled Resource Consumption leading to DoS
Concrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons
Concrete CMS vulnerable to Cross-site Scripting via multilingual report
Concrete CMS vulnerable to Cross-site Scripting
Concrete CMS vulnerable to Session Fixation
Inefficient Regular Expression Complexity in Liferay Portal
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.