Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Nativery <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tag Groups is the Advanced Way to Display Your Taxonomy Terms <= 2.0.4 - Reflected Cross-Site Scripting
Htaccess File Editor <= 1.0.19 - Unauthenticated Information Exposure
Mapbox for WP Advanced <= 1.0.0 - Reflected Cross-Site Scripting
Eazy Under Construction <= 1.0 - Reflected Cross-Site Scripting
Elementor AI Addons <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP ViewSTL <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup
Product Carousel For WooCommerce – WoorouSell <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Post Corrector <= 1.0.2 - Reflected Cross-Site Scripting
Brizy Pro <= 2.8.0 - Reflected Cross-Site Scripting
Post Carousel & Slider <= 1.0.4 - Reflected Cross-Site Scripting
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.3 - Unauthenticated Information Exposure
WP News Sliders <= 1.0 - Missing Authorization
Banner Garden Plugin for WordPress <= 0.1.3 - Reflected Cross-Site Scripting
Build Private Store For Woocommerce <= 1.0 - Cross-Site Request Forgery
Partners <= 0.2.0 - Reflected Cross-Site Scripting
Solidres <= 0.9.4 - Reflected Cross-Site Scripting
Post Grid and Gutenberg Blocks <= 2.2.92 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Projects Portfolio with Client Testimonials <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Glossy <= 2.3.5 - Reflected Cross-Site Scripting
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.