Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Cookie Consent'
Simple Pricing Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
EKC Tournament Manager <= 2.2.1 - Cross-Site Request Forgery to Tournament and Team Creation
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
Reservit Hotel <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
EKC Tournament Manager <= 2.2.1 - Cross-Site Request Forgery to Tournament Deletion
Gameplan <= 1.5.10 - Reflected Cross-Site Scripting
Themify Builder <= 7.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
AJAX Random Posts <= 0.3.3 - Unauthenticated PHP Object Injection
Full Screen (Page) Background Image Slideshow <= 1.1 Authenticated (Administrator+) Stored Cross-Site Scripting
wp-login customizer <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
BasePress Migration Tools <= 1.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
Linear <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
ReConstruction <= 1.4.7 - Reflected Cross-Site Scripting
Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection
Referrer Detector <= 4.2.1.0 - Unauthenticated PHP Object Injection
Airin Blog <= 1.6.2 - Unauthenticated PHP Object Injection
Exclusive Content Password Protect <= 1.1.0 - Cross-Site Request Forgery to Arbitrary File Upload
WDES Responsive Mobile Menu <= 1.2.5 - Unauthenticated PHP Object Injection
CSV to html <= 3.26 - Authenticated (Subscriber+) Arbitrary File Upload
Gallerio <= 1.01 - Authenticated (Subscriber+) Arbitrary File Upload
Hacklog DownloadManager <= 2.1.4 - Cross-Site Request Forgery to Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.