Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
3D Presentation <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Download-Mirror-Counter <= 1.1 - Authenticated (Contributor+) SQL Injection
LH QR Codes <= 1.06 - Authenticated (Contributor+) Stored Cross-Site Scripting
Selar.co Widget <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hover Video Preview <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bigmart Elements <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Show Visitor IP Address <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) SQL Injection
Meta Store Elements <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sales Page Addon – Elementor & Beaver Builder <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Audio Comparison Lite <= 3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Genoo <= 6.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Taskbuilder – WordPress Project & Task Management plugin <= 3.0.4 - Authenticated (Admin+) SQL injection
RSVP ME <= 1.9.9 - Authenticated (Contributor+) SQL Injection
Lodgix.com Vacation Rental Website Builder <= 3.9.73 - Authenticated (Contributor+) SQL Injection
Clever Addons for Elementor <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
bpmn.io <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slicko <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
MasterBip para Elementor <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Super Addons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP EIS <= 1.3.3 - Authenticated (Contributor+) SQL Injection
Media Modal <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Gallery <= 1.4 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.