Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersSocial Auto Poster <= 5.3.15 - Reflected Cross-Site Scripting
Automatically Hierarchic Categories in Menu <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Reflected Cross-Site Scripting
DK PDF <= 1.9.6 - Reflected Cross-Site Scripting
UltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object Injection
RomethemeKit For Elementor <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation
The Pack Elementor addons <= 2.0.8.8 - Authenticated (Author+) Stored Cross-Site Scripting
XO Slider <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Page-list <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Full frame <= 2.7.2 - Authenticated (Author+) Stored Cross-Site Scripting
Easy WordPress Subscribe – Optin Hound <= 1.4.3 - Reflected Cross-Site Scripting via add_query_arg Parameter
Web Directory Free <= 1.7.3 - Reflected Cross-Site Scripting
JobSearch <= 2.5.9 - Unauthenticated PHP Object Injection
Blockspare <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.121 - Reflected Cross-Site Scripting
SliceWP <= 1.1.18 - Reflected Cross-Site Scripting
ElementInvader Addons for Elementor <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
VdoCipher <= 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Soumettre.fr <= 2.1.3 - Missing Authorization
BuddyForms <= 2.8.12 - Authenticated (Editor+) Stored Cross-Site Scripting
JobSearch <= 2.5.9 - Reflected Cross-Site Scripting
LA-Studio Element Kit for Elementor <= 1.3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.