Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
drupal/diba_carousel - SA-CONTRIB-2026-191
drupal/smart_content - SA-CONTRIB-2026-190
drupal/css_usage_analyzer - SA-CONTRIB-2026-189
drupal/combined_image_style - SA-CONTRIB-2026-188
drupal/ai_ckeditor - SA-CONTRIB-2026-187
drupal/webform_rest - SA-CONTRIB-2026-186
drupal/editoria11y - SA-CONTRIB-2026-185
drupal/tawk_to - SA-CONTRIB-2026-184
drupal/stop_admin - SA-CONTRIB-2026-183
drupal/rest_api_authentication - SA-CONTRIB-2026-182
drupal/cookiecuttr - SA-CONTRIB-2026-181
drupal/mermaid_diagram_field - SA-CONTRIB-2026-180
drupal/commerce_decoupled_checkout - SA-CONTRIB-2026-179
SiteSkite – Secure MCP & AI WebOps. Connect ChatGPT, Claude, or Any AI Agent via MCP <= 2.1.7 - Authenticated (Contributor+) Insecure Direct Object Reference
Team – Team Members Showcase Plugin <= 6.0.0 - Unauthenticated Insecure Direct Object Reference
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.69 - Authenticated (Contributor+) Stored Cross-Site Scripting
drupal/project_browser - SA-CONTRIB-2026-178
drupal/cloud - SA-CONTRIB-2026-177
drupal/cloud - SA-CONTRIB-2026-176
JetTricks <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
drupal/webform - SA-CONTRIB-2026-175
drupal/webform - SA-CONTRIB-2026-174
drupal/webform - SA-CONTRIB-2026-173
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.