Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
SQL injection in MCMS
Cross-Site Request Forgery microweber
url-parse Incorrectly parses URLs that include an '@'
Prototype pollution in Plist before 3.0.5 can cause denial of service
Header Footer Code Manager <= 1.1.16 - Reflected Cross-Site Scripting
Essential Addons for Elementor Lite <= 5.0.8 - Reflected Cross-Site Scripting
Zero Spam <= 5.2.10 - Admin+ SQL Injection
adblock detector nordmograph
Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0
Cross-site Scripting in livehelperchat
Authorization Bypass Through User-Controlled Key in urijs
Improper Privilege Management in Snipe-IT
Prototype Pollution in litespeed.js and appwrite/server-ce
Magento improper input validation vulnerability
Improper Certificate Validation in Hutool
SQL Injection in Jeecg-boot
SQL Injection in Jeecg-boot
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via platform
Profile Builder - User Profile & User Registration Forms <= 3.6.1 - Cross-Site Scripting via site_url Parameter
ARI Stream Quiz – WordPress Quizzes Builder <= 1.2.26 - Reflected Cross-Site Scripting
Kunze Law < 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Sync QCloud COS Plugin < 2.0.1 - Authenticated (Admin+) Cross-Site Scripting
Contact Form 7 Connector <= 1.1.13 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.