Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Easy Contact <= 0.1.2 - Reflected Cross-Site Scripting
Ecwid Shopping Cart <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Emma for WordPress <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ai Image Alt Text Generator for WP <= 1.1.5 - Authenticated (Subscriber+) Sensitive Information Exposure
Administrator Z <= 2025.09.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
MasterStudy LMS <= 3.5.28 - Missing Authorization
Salon booking system <= 10.29.6 - Missing Authorization
Welcome Bar <= 2.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
News Kit Elementor Addons <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
ActiveCampaign <= 8.1.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.2 - Authenticated (Subscriber+) Sensitive Information Exposure
Musician's Pack for Elementor <= 1.8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Freetobook Responsive Widget <= 1.1 - Cross-Site Request Forgery
Easy WP Optimizer <= 1.1.0 - Missing Authorization
JobWP <= 2.3.9 - Cross-Site Request Forgery
Xpro Elementor Addons <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tockify Events Calendar <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
BWD Elementor Addons <= 4.3.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Daisycon prijsvergelijkers <= 4.8.4 - Authenticated (Contributor+) SQL Injection
Embed Chessboard <= 3.07.00 - Authenticated (Contributor+) Stored Cross-Site Scripting
CMP – Coming Soon & Maintenance <= 4.1.13 - Authenticated (Admin+) Arbitrary File Upload
B Blocks - The ultimate block collection <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Table Block by Tableberg <= 0.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.