Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersJeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Authenticated (Subscriber+) SQL Injection
EventON <= 2.2.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
WPify Woo Czech <= 4.0.10 - Reflected Cross-Site Scripting
Unique <= 0.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social Icons Widget & Block <= 4.2.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
RegistrationMagic <= 5.3.2.0 - Reflected Cross-Site Scripting
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Min and Max Purchase for WooCommerce <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Carousel Slider <= 2.2.10 - Authenticated (Editor+) Stored Cross-Site Scripting
Archives Calendar Widget <= 1.0.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Masteriyo - LMS <= 1.7.3 - Insecure Direct Object Reference
Where Did You Hear About Us Checkout Field for WooCommerce <= 1.3.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery
Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Embed Google Fonts <= 3.1.0 - Missing Authorization
Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness
Exclusive Addons Elementor <= 2.6.9.1 - Missing Authorization to Post Duplication
SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Deletion
WTI Like Post <= 1.4.6 - IP Spoofing
Giphypress <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fancy Elementor Flipbox <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Elementor Flipbox Widget
Admin Page Spider <= 3.31 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.