Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersHomey Core <= 2.4.3 - Missing Authorization
Ultimate Post Kit <= 4.0.15 - Unauthenticated Information Disclosure
Audier For Elementor <= 1.0.9 - Missing Authorization
Scroller <= 2.0.2 - Missing Authorization
Comparimager for Elementor <= 1.0.1 - Missing Authorization
Carter for Elementor <= 1.0.2 - Missing Authorization
Coder for Elementor <= 1.0.13 - Missing Authorization
Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read
Elated Membership <= 1.2 - Authentication Bypass via Social Login
Advance WP Query Search Filter <= 1.0.10 - Reflected Cross-Site Scripting
Imager for Elementor <= 2.0.4 - Missing Authorization
Broken Link Checker <= 1.2.6 - Authenticated (Author+) SQL Injection
Simple Download Counter <= 2.2.2 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal
Video Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload
Advance WP Query Search Filter <= 1.0.10 - Reflected Cross-Site Scripting
Login Security, FireWall, Malware removal by CleanTalk <= 2.168 - Unauthenticated Stored Cross-Site Scripting via Page URL
Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.17 - Cross-Site Request Forgery to Product Field Group Duplication and Publication
Custom Field Template <= 2.7.6 - Authenticated (Subscriber+) Information Exposure
Beaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
Geo Controller <= 8.9.5 - Unauthenticated Information Exposure
Just TinyMCE Custom Styles <= 1.2.1 - Cross-Site Request Forgery
Social Photo Fetcher <= 3.0.4 - Cross-Site Request Forgery
YaMaps <= 0.6.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.