Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass
NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass
Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass
Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypass
MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass
Radio Buttons for Taxonomies <= 2.0.5 - Cross-Site Request Forgery Bypass
Feed Them Social – Page, Post, Video, and Photo Galleries <= 2.8.6 - Cross-Site Request Forgery Bypass
Cool Timeline (Horizontal & Vertical Timeline) <= 2.0.2 - Cross-Site Request Forgery Bypass
Import / Export Customizer Settings <= 1.0.3 - Cross-Site Request Forgery Bypass
Security Constraint Bypass in Spring Security
Authorization Bypass in Spring Security
Unsafe deserialization in Yii 2
Potential XSS injection In PrestaShop contactform
DiveBook <= 1.1.4 - Reflected Cross-Site Scripting
DiveBook <= 1.1.4 - SQL Injection
Prototype Pollution in node-forge
XXE in Apache Standard Taglibs
Sensitive Data Exposure in Apache Ant
Renovate vulnerable to Azure DevOps token leakage in logs
Social Chat - SQL Injection
Malicious Package in radic-util
Malicious Package in motiv.scss
SQL Injection in untitled-model
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.