Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Page Restriction WordPress <= 1.2.6 - Admin+ Stored Cross-Site Scripting
Menubar <= 5.7.2 - Reflected Cross-Site Scripting
Coming Soon by Supsystic <= 1.7.5 - Reflected Cross-Site Scripting
Text Hover <= 4.1 - Admin+ Stored Cross-Site Scripting
Pricing Table by Supsystic <= 1.9.4 - Reflected Cross-Site Scripting
Easy Digital Downloads <= 2.11.5 - Cross-Site Request Forgery
Easy Google Maps <= 1.9.31 - Reflected Cross-Site Scripting
SQL Injection in elide-datastore-aggregation
Unauthenticated user can list hidden document from multiple velocity templates in XWiki
Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx
Unauthenticated user can retrieve the list of users through uorgsuggest.vm
Infinite loop in .Net Bond
elFinder Unrestricted File Upload vulnerability
Path traversal in Hadoop
DW Question & Answer Pro <= 1.3.6 - Missing Authorization Checks
Advanced Page Visit Counter <= 6.1.5 - Subscriber+ Blind SQL injection
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting
BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection
DW Question & Answer Pro <= 1.3.6 - Cross-Site Request Forgery
Nimble Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
English WordPress Admin <= 1.5.1.1 - Unauthenticated Open Redirect
Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button – Chaty <= 2.8.3 - Admin+ Stored Cross-Site Scripting
Denial of Service vulnerability in @podium/layout and @podium/proxy
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.