Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
SQL injection in phpMyAdmin
WP Database Reset <= 3.1 - Unauthenticated Database Reset
Chained Quiz <= 1.1.8.1 - Reflected Cross-Site Scripting
Resim Ara <= 1.0 - Reflected Cross-Site Scripting
WP Database Reset <= 3.1 - Privilege Escalation
Cross-site scripting in markdown2 for python
PyAMF vulnerable to XML external entity (XXE)
YOP Poll <= 6.1.1 - Reflected Cross-Site Scripting
Flamingo <= 2.1 - CSV Injection
ListingPro - WordPress Directory & Listing Theme < 2.5.4 - Cross-Site Scripting
LearnDash 3.0.0-3.1.1 - Reflected Cross Site Scripting issue on the [ld_profile] search field
Persistent XSS vulnerability in filename of attached file in PrivateBin
Local Privilege Escalation in PyInstaller
Client Denial of Service on TUF
XSS in Apache Airflow
Real Estate 7 WordPress < 2.9.5 - Multiple Vulnerabilities
Backup and Staging by WP Time Capsule <= 1.21.15 - Authentication Bypass
InfiniteWP Client <= 1.9.4.4 - Authentication Bypass
Contact Form Clean and Simple <= 4.7.0 - Authenticated Stored Cross-Site Scripting
Improper Verification of Cryptographic Signature in PySAML2
Traveler – Travel Booking WordPress Theme < 2.7.8.6 - Cross-Site Scripting
Ultimate Member <= 2.1.2 - Insecure Direct Object Reference
Computer Repair Shop < 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.