Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWot Elementor Widgets <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Prodigy Commerce <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.7 - Missing Authorization
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ni CRM Lead <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
Contact Form Builder <= 4.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via livesite-pay Shortcode
WIP WooCarousel Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposure
Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Accounting for WooCommerce <= 1.6.6 - Reflected Cross-Site Scripting
AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosure
Jetpack 13.0 - 14.0 - Reflected DOM-based Cross-Site Scripting
NewsMunch <= 1.0.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Redirection <= 1.5 - Cross-Site Request Forgery to Arbitrary Site Redirect
Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting
Email Address Obfuscation <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter
Listdom – Business Directory and Classified Ads Listings WordPress Plugin <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Parameter
WPBITS Addons For Elementor Page Builder <= 1.5.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Additional Custom Order Status for WooCommerce <= 1.6.0 - Reflected Cross-Site Scripting
SearchIQ – The Search Solution <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
NPS computy <= 2.8.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.