Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Improper Access Control in novajoin
Invenio-App vulnerable to host header injection attack
Cross-site Scripting in invenio-communities
Cross-site scripting invenio-records
Cross-site Scripting in invenio-previewer
JoomSport – for Sports: Team & League, Football, Hockey & more < 3.4 - SQL Injection
WP Fastest Cache <= 0.8.9.5 - Directory Traversal
Animate It <= 2.3.5 - Cross-Site Scripting
Animate It <= 2.3.5 - Cross-Site Scripting
Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection
Simple Membership <= 3.8.4 - Cross-Site Request Forgery
Custom Simple RSS < 2.0.7 - Cross-Site Request Forgery
Animate It <= 2.3.5 - Cross-Site Request Forgery
Deserialization of Untrusted Data in EthereumJ
Cross-site scripting in CLEditor
Deserialization of Untrusted Data and Code Injection in xstream
Photo Gallery by 10Web <= 1.5.30 - SQL Injection
Blog2Social: Social Media Auto Post & Scheduler <= 5.5.0 - SQL Injection
drupal/existing_values_autocomplete_widget - SA-CONTRIB-2019-060
drupal/metatag - SA-CONTRIB-2019-058
Contact Form 7 Dynamic Text Extension < 2.0.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.