Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Blog comment posting, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0
RCE via PHP Object injection via SOAP Requests
Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0
SW Ajax WooCommerce Search <= 1.2.6 - Reflected Cross-Site Scripting
Cross-site Scripting in Strapi
Improper Authorization in Strapi
WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
WordPress Core < 5.5.2 - Spam Embed on Multisite Installations
WordPress Core < 5.5.2 - Arbitrary File Deletion
WordPress Core < 5.5.2 - Misconfiguration That Allows Trigger of New Installation
WordPress Core < 5.5.2 - Stored Cross-Site Scripting via post slugs
WordPress Core < 5.5.2 - Cross-Site Request Forgery to Theme Image Change
WordPress Core < 5.5.2 - Deserialization Gadget
Greenmart <= 2.5.1 - Reflected Cross-Site Scripting
WordPress Core < 5.5.2 - Reflected Cross-Site Scripting via Global Variables
WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
WordPress Core < 5.5.3 - PHP Object Injection Gadget
Unauthorized privilege escalation in Mod module
CLI does not correctly implement strict mode
Command Injection in systeminformation
xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion
systeminformation command injection vulnerability
Heap buffer overflow in CefSharp
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.