Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
MyAlice – Live Chat, WhatsApp, Facebook Messenger, Instagram, & Chatbot for WooCommerce <= 1.2.7 - Stored Cross-Site Scripting
RSVPMaker <= 9.2.5 - Unauthenticated SQL Injection
Turn off all comments <= 1.0 - Reflected Cross-Site Scripting
Gwyn's Imagemap Selector <= 0.3.3 - Reflected Cross-Site Scripting
Potential Captcha Validate Bypass in flask-session-captcha
ShortPixel Adaptive Images <= 3.3.1 - Subscriber+ Arbitrary Settings Update
Stored cross-site scripting in Snipe-IT
WPC Smart Wishlist for WooCommerce <= 2.9.8 - Reflected Cross-Site Scripting
Night Mode <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
WP YouTube Live <= 1.8.2 - Admin+ Stored Cross-Site Scripting
WP Subtitle <= 3.4 - Cross-Site Scripting
Pricing Table Plugin <= 3.6 - Unauthenticated SQL Injection
Gmedia Photo Gallery < 1.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting
WPCargo Track & Trace <= 6.9.4 - Reflected Cross-Site Scripting
ScrollReveal.js Effects <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Tracked Tweets <= 0.2.9 - Cross-Site Request Forgery to Cross-Site Scripting
WPCargo Track & Trace <= 6.9.4 - Admin+ Stored Cross Site Scripting
3xSocializer <= 0.98.22 - Authenticated SQL Injection
Call Now Button <= 1.1.1 - Reflected Cross-Site Scripting
PrestaShop XSS Vulnerability
Hash collision attack vulnerability in Jenkins
JBoss AS may expose root content if excluded-contexts list is mismatched
Contao core SQL Injection Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.