Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
WP Gmail SMTP <= 1.0.7 - Sensitive Information Exposure
MSTW CSV EXPORTER <= 1.4 - Missing Authorization
Did Prestashop Display <= 1.0.30 - Cross-Site Request Forgery
Newsup <= 5.0.10 - Missing Authorization to Authenticated (Subscriber+) Plugin Installation
Blox Lite <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection
Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure
Ovatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload
Events Maker by dFactory <= 1.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Mapbox GL JS Maps <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Everest Backup <= 2.3.8 - Missing Authorization
Next Page, Not Next Post <= 0.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Freeio <= 1.2.21 - Unauthenticated Privilege Escalation
Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode
BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE
BBOT's various issues in unarchive.py can cause arbitrary file write and RCE
Amazon.IonDotnet is vulnerable to Denial of Service attacks
Liferay Portal is vulnerable to XSS through its Calendar Events parameters
Better Auth: Unauthenticated API key creation through api-key plugin
Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.