Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Forminator Plugin <= 1.5.4 - Cross-Site Scripting
GiveWP <= 2.3.0 - Cross-Site Scripting
NextScripts: Social Networks Auto-Poster <= 4.2.7 - Reflected Cross-Site Scripting
WP Live Chat Support <= 8.0.17 - Cross-Site Scripting
WP Google Maps < 7.10.43 - Reflected Cross-Site Scripting
YOP Poll <= 6.0.2 - Reflected Cross-Site Scripting via poll_id Parameter
Contact Form Email <= 1.2.65 - Reflected Cross-Site Scripting
KingComposer <= 2.8 - Reflected Cross-Site Scripting
Depth counting error in guard() leading to multiple potential security issues in aioxmpp
Pyspark User Impersonation Vulnerability
Easy Shop - Other
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting
NextGen Gallery <= 3.1.5 - PHP Object Injection
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting
Parallax Scroll <= 2.0.1 - Cross-Site Scripting
Meta Box - WordPress Custom Fields Framework <= 4.16.2 - File Deletion via attachment_id Parameter
Pylons Colander Denial of Service vulnerability
Meta Box <= 4.16.1 - Mishandling of File Upload
OneLogin SAML SSO <= 2.8.0 - Distributed Denial-of-Service
Yet Another Stars Rating <= 1.8.6 - Unauthenticated PHP Object Injection
Low severity vulnerability that affects org.springframework.batch:spring-batch-core
Vulnerability that affects org.springframework.ws:spring-ws and org.springframework.ws:spring-xml
Improper Restriction of XML External Entity Reference in org.springframework.integration:spring-integration-ws and org.springframework.integration:spring-integration-xml
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.