Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersMega Elements <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
leenk.me <= 2.16.0 - Reflected Cross-Site Scripting
myCred Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
3D Work In Progress <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Upload
TeploBot - Telegram Bot for WP <= 1.3 - Telegram Bot Token Disclosure
Custom Icons for Elementor <= 0.3.3 - Authenticated (Admin+) Arbitrary File Upload
StreamWeasels Twitch Integration <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-twitch-embed Shortcode
ElementInvader Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Information Exposure
Social Link Groups <= 1.1.0 - Authenticated (Contributor+) SQL Injection
GoogleDrive folder list <= 2.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
APA Register Newsletter Form <= 1.0.0 - Cross-Site Request Forgery to SQL Injection
MyTweetLinks <= 1.1.1 - Authenticated (Subscriber+) SQL Injection
Endless Posts Navigation <= 2.2.7 - Cross-Site Request Forgery
Registrations for the Events Calendar – Event Registration Plugin <= 2.12.3 - Unauthenticated Stored Cross-Site Scripting
Duplicate Title Validate <= 1.0 - Authenticated (Subscriber+) SQL Injection
SermonAudio Widgets <= 1.9.3 - Authenticated (Contributor+) SQL Injection
WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting
WP Education <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via text_html_tag
Shipyaari Shipping Management <= 1.2 - Unauthenticated PHP Object Injection
SiteBuilder Dynamic Components <= 1.0 - Unauthenticated PHP Object Injection
Author Discussion <= 0.2.2 - Authenticated (Subscriber+) SQL Injection
WordPress Image SEO <= 1.1.4 - Cross-Site Request Forgery
Back Link Tracker <= 1.0.0 - Cross-Site Request Forgery to SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.