Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Classy Addons for Elementor <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smart Mockups <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Restaurant & Cafe Addon for Elementor <= 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Advanced Control Manager for WordPress by ItalyStrap <= 2.16.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Job Manager <= 1.1 - Authenticated (Contributor+) SQL Injection
Media Library Tools <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting
Hoo Addons for Elementor <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
RLM Elementor Widgets Pack <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Quran Shortcode <= 1.5 - Authenticated (Contributor+) SQL Injection
(dp) AddThis <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) Cross-Site Scripting
WP EASY RECIPE <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Clyp <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Display Terms Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
amazing neo icon font for elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Emoji Shortcode <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
NMR Strava activities <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Hotel Booking <= 2.2.9 - Authenticated (Contributor+) Local File Inclusion
WP Feature Box <= 0.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CM Table Of Contents <= 1.2.3 - Cross-Site Request Forgery
Awesome Progress Bar <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alphabetical List <= 1.0.3 - Cross-Site Request Forgery to Settings Update
Simple Business Manager <= 4.6.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.