Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Auth0-js bypasses CSRF checks
Regular Expression Denial of Service in ssri
Import any XML or CSV File to WordPress <= 3.4.6 - Cross-Site Scripting
SquadManagement - SQL Injection
JQuickContact - SQL Injection
File Download Tracker - SQL Injection
JB Bus - SQL Injection
Simple Calendar - SQL Injection
WOOF - Products Filter for WooCommerce <= 1.1.9 - Remote Code Execution
WOOF - Products Filter for WooCommerce <= 1.1.9 - Local File Inclusion
Checklist by Joomplace - SQL Injection
Ek rishta - SQL Injection
PrayerCenter - SQL Injection
CW Tags - SQL Injection
Insight API transaction broadcast endpoint can result in Full Path Disclosure
AWS Lambda parser is vulnerable to Regular Expression Denial of Service
ejs vulnerable to DoS due to weak input validation
Regular Expression Denial of Service in moment
iThemes Security <= 6.9.0 - Cross-Site Scripting
JGive - SQL Injection
JMS Music - SQL Injection
NeoRecruit - SQL Injection
Form Maker - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.