Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Marquee Elementor with Posts <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bonway Static Block Editor <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
AmaDiscount <= 1.0 - Authenticated (Contributor+) SQL Injection
ThemeShark Templates & Widgets for Elementor <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Aajoda Testimonials <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
5 Stars Rating Funnel <= 1.4.01 - Authenticated (Contributor+) SQL Injection
Sided <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
AMP Img Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kento Ads Rotator <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Курс валют UAH <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
EndomondoWP <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
ApplyOnline <= 2.6.2 - Unauthenticated Application Disclosure
GEO My WordPress <= 4.4.0.2 - Authenticated (Admin+) Arbitrary File Upload
Porsline <= 1.0.2 - Authenticated (Contributor+) SQL Injection
Gmap Point List <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
DataMentor <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Business <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elementary Addons <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Reftagger Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Popup Box <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
WM Zoom <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Blrt WP Embed <= 1.6.9 - Authenticated (Contributor+) SQL Injection
AwesomePress <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.