Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Master Addons for Elementor <= 2.0.6.2 - Authenticated (Author+) Stored Cross-Site Scripting
Coming Soon <= 1.6.3 - Unauthenticated Information Exposure
WP Fast Total Search <= 1.68.232 - Missing Authorization
Events Calendar for Google <= 2.1.0 - Authenticated (Contributor+) Local File Inclusion
Meks Video Importer <= 1.0.12 - Missing Authorization
Dynamic Word Spinner: CSS3 Animated Rotation <= 5.6 - Cross-Site Request Forgery
Download Button for Elementor <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
GD Rating System <= 3.6 - Authenticated (Contributor+) Local File Inclusion
Auto Featured Image (Auto Post Thumbnail) <= 4.1.2 - Missing Authorization
Plum: Spin Wheel & Email Pop-up <= 2.0 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Google Adsense & Banner Ads by AdsforWP <= 1.9.28 - Cross-Site Request Forgery
EazyDocs <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data
HT Mega <= 2.5.7 - Authenticated (Contributor+) JSON File Directory Traversal
Contact Form 7 Summary and Print <= 1.2.5 - Cross-Site Request Forgery
Link Library <= 7.7.1 - Reflected Cross-Site Scripting
i-amaze <= 1.3.7 - Cross-Site Request Forgery
Event post <= 5.9.10 - Cross-Site Request Forgery
Barcode Scanner with Inventory & Order Manager <= 1.6.1 - Authenticated (Subscriber+) SQL Injection
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion via 'Delete'
SKT Skill Bar <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Plum: Spin Wheel & Email Pop-up <= 2.0 - Missing Authorization
Job Board Manager <= 2.1.58 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.