Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery allowing Option Update
Rank Math SEO <= 1.0.26 - Cross-Site Scripting
Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery
Facebook Chat Plugin <= 1.2 - Cross-Site Request Forgery to Site Settings Changes
Improper Certificate Validation in Twisted
WordPress Download Manager <= 2.9.96 - Cross-Site Scripting
Ultimate Member <= 2.0.39 - Privilege Escalation
LionScripts: IP Blocker Lite <= 10.4 - Cross-Site Request Forgery to Arbitrary File Upload
Ultimate Member <= 2.0.39 - Unauthorized Profile Modification
Directory Traversal in lactate
Regular Expression Denial of Service in underscore.string
Sandbox Bypass Leading to Arbitrary Code Execution in constantinople
Failure to sanitize quotes which can lead to sql injection in squel
Forced Logout in keycloak-connect
Prototype Pollution in @apollo/gateway
XML Entity Expansion in Pippo
Open Redirect in Spring Security OAuth
Credential exposure through log files in Undertow
Cross-Site Scripting in ids-enterprise
Cross-Site Scripting in ids-enterprise
Cross-Site Scripting in ids-enterprise
Command Injection in wiki-plugin-datalog
Regular Expression Denial of Service (ReDoS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.