Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Leaflet Map < 3.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
PWA for WP & AMP < = 1.7.32 - Missing Authorization
Leaflet Map <= 2.23.3 - Contributor+ Stored Cross-Site Scripting
PWA for WP & AMP <= 1.7.32 - Arbitrary File Upload
Resource exhaustion in socket.io-parser
drupal/block_content_revision_ui - SA-CONTRIB-2021-022
drupal/linky_revision_ui - SA-CONTRIB-2021-021
drupal/apigee_edge - SA-CONTRIB-2021-020
XML2Dict XML Entity Expansion Vulnerability
SEO <= 4.0.2 - Cross-Site Request Forgery
intimate Payments Plugin <= 1.3.1 - Cross-Site Request Forgery
MZ MBO Access <= 2.0.8 - Cross-Site Request Forgery
KONTXT Content Advisor <= 2.2 - Cross-Site Request Forgery
Fontsampler <= 0.4.12 - Cross-Site Request Forgery to Cross-Site Scripting
Journey Analytics <= 1.0.12 - Cross-Site Request Forgery
WP Prayer <= 1.5.4 - Cross-Site Request Forgery
Strong Testimonials <= 2.51.2 - Authorization Bypass
BuddyPress Customer.io Analytics Integration <= 1.1.6 - Cross-Site Request Forgery
MZ Mindbody API <= 2.8.2 - Cross-Site Request Forgery
WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc <= 5.4.9 - Reflected Cross-Site Scripting
Instantio – WooCommerce Quick Checkout | Instant Checkout, Side Cart & Popup Cart <= 1.2.5 - Cross Site Request Forgery
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.35.1 - Authorization Bypass
KONTXT Improves WordPress Search <= 1.4.6 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.