Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Context isolation bypass via leaked cross-context objects in Electron
Context isolation bypass via Promise in Electron
Adning Advertising <= 1.5.5 - Unauthenticated Arbitrary File Deletion via Path Traversal
Elementor Website Builder <= 2.9.13 - Authenticated Stored Cross-Site Scripting
Power's WHOIS Domain Check <= 0.9.31 - Authenticated Stored Cross-Site Scripting
Adning Advertising <= 1.5.5 - Arbitrary File Upload
Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization
Careerfy <= 4.0.0 - Cross-Site Scripting
JobSearch WP Job Board <= 1.5.1 - Stored Cross-Site Scripting
JobSearch WP Job Board <= 1.5.1 - Stored Cross-Site Scripting
JobSearch WP Job Board <= 1.5.2 - Authenticated Stored Cross-Site Scripting
JobSearch WP Job Board <= 1.5.2 - Reflected Cross-Site Scripting
Testimonials Widget <= 3.5.1 - Multiple Authenticated Stored Cross-Site Scripting
CareerUp < 2.3.1 - Reflected Cross-Site Scripting
JobSearch WP Job Board <= 1.5.1 - Reflected Cross-Site Scripting
JobSearch WP Job Board <= 1.5.1 - Stored Cross-Site Scripting
Cross-site Scripting in October
CarePlus - Health & Medical Responsive WordPress Theme <= 1.2 - Cross-Site Scripting
Jetapo | Jobboard WordPress Theme and Jetapo | Jobboard WordPress Theme with WooCommerce < 1.1 - Cross-Site Scripting
Payment Form for PayPal Pro < 1.1.65 - SQL Injection
InJob | Multi features for recruitment WordPress Theme <= 3.4.0 - Reflected Cross-Site Scripting
Mona Lisa <= 2.1.2 - Reflected Cross-Site Scripting
XML external entity injection in Terracotta Quartz Scheduler
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.