Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.45 - Directory Traversal
Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting
Docket Cache – Object Cache Accelerator <= 21.08.01 - Reflected Cross-Site Scripting
CoolClock <= 4.3.4 - Authenticated Stored Cross-Site Scripting
User Activity Log <= 1.4.6 - Reflected Cross Site Scripting
Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting
TranslatePress <= 2.0.8 - Authenticated Stored Cross-Site Scripting
Countdown Block <= 1.1.1 - Missing Authorization
User Activity Log <= 1.4.6 - Reflected Cross-Site Scripting
Duplicate Page <= 4.4.1 Authenticated (Admin+) Stored Cross-Site Scripting
Mezzanine Cross Site Scripting (XSS) vulnerability
Command Injection in Simiki
Cross Site Scripting (XSS) in Simiki
Woffice CRM <= 4.0.1 - Authorization Bypass
CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
PostX Gutenberg Blocks Saved Templates Addon <= 2.4.9 - Private Content Disclosure
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Stored Cross-Site Scripting
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
remote code execution via git repo provider
Code injection in nbgitpuller
drupal/webform - SA-CONTRIB-2021-026
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.