Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Dropdown Menu Widget <= 1.9.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution
Mark Posts <= 2.0.0 - Admin+ Stored Cross-Site Scripting
Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure
Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion
Cross-site Scripting in microweber
Cross-site Scripting in microweber
Cross-site Scripting in ShowDoc
Cross-site Scripting in microweber
Deeply nested json in jackson-databind
Spoofing attack in swagger-ui
Spoofing attack in swagger-ui-dist
Integer Overflow or Wraparound in Microweber
Unrestricted Upload of File with Dangerous Type in microweber
Cross-site Scripting in microweber
Server-side Template Injection in nystudio107/craft-seomatic
Command injection in simple-git
Moodle stored Cross-site Scripting
Moodle denial-of-service risk in the draft files area
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Moodle Blind SQL injection possible via MNet authentication
Moodle Information Disclosure vulnerability
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.