Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Move Addons for Elementor <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Search Atlas SEO <= 1.8.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
BA Book Everything <= 1.6.20 - Reflected Cross-Site Scripting
Zotpress <= 7.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Element Pack Elementor Addons <= 5.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
YITH WooCommerce Product Add-Ons <= 4.13.0 - Reflected Cross-Site Scripting
Social Auto Poster <= 5.3.15 - Reflected Cross-Site Scripting
Automatically Hierarchic Categories in Menu <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Reflected Cross-Site Scripting
DK PDF <= 1.9.6 - Reflected Cross-Site Scripting
UltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object Injection
RomethemeKit For Elementor <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation
The Pack Elementor addons <= 2.0.8.8 - Authenticated (Author+) Stored Cross-Site Scripting
XO Slider <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Page-list <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Full frame <= 2.7.2 - Authenticated (Author+) Stored Cross-Site Scripting
Easy WordPress Subscribe – Optin Hound <= 1.4.3 - Reflected Cross-Site Scripting via add_query_arg Parameter
Web Directory Free <= 1.7.3 - Reflected Cross-Site Scripting
JobSearch <= 2.5.9 - Unauthenticated PHP Object Injection
Blockspare <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.121 - Reflected Cross-Site Scripting
SliceWP <= 1.1.18 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.