Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
HQ60 Fidelity Card <= 1.8 - Reflected Cross-Site Scripting
Responsive Data Table <= 1.3 - Reflected Cross-Site Scripting
Fabrica Synced Pattern Instances <= 1.0.8 - Reflected Cross-Site Scripting
MG Post Contributors <= 1.3 - Reflected Cross-Site Scripting
Responsive Filterable Portfolio <= 1.0.22 - Server-Side Request Forgery
Simple Modal <= 0.3.3 - Reflected Cross-Site Scripting
SrcSet Responsive Images for WordPress <= 1.4 - Reflected Cross-Site Scripting
Bing Search API Integration <= 0.3.3 - Reflected Cross-Site Scripting
imPress <= 0.1.4 - Reflected Cross-Site Scripting
WP-Basics <= 2.0 - Reflected Cross-Site Scripting
WP Visual Adverts <= 2.3.0 - Reflected Cross-Site Scripting
Shortcodes Blocks Creator Ultimate <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Firework Shoppable Live Video <= 6.3 - Reflected Cross-Site Scripting
User Password Reset <= 1.0 - Reflected Cross-Site Scripting
WP MMenu Lite <= 1.0.0 - Reflected Cross-Site Scripting
FriendStore for WooCommerce <= 1.4.2 - Reflected Cross-Site Scripting
eewee admin custom <= 1.8.2.4 - Reflected Cross-Site Scripting
YaDisk Files <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider
Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Conversion Helper <= 1.12 - Reflected Cross-Site Scripting
Loginizer Security and Loginizer <= 1.9.2 - Authentication Bypass via WordPress.com OAuth provider
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.