Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersContact Forms by Cimatti <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting
Sitekit <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Specific Content For Mobile – Customize the mobile version without redirections <= 0.1.9.5 - Reflected Cross-Site Scripting
Table & Contact Form 7 Database – Tablesome <= 1.0.27 - Reflected Cross-Site Scripting
WooThumbs for WooCommerce by Iconic <= 5.5.3 - Reflected Cross-Site Scripting
FV Flowplayer Video Player <= 7.5.41.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting
Inline Related Posts <= 3.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Coupon Affiliates <= 5.12.7 - Reflected Cross-Site Scripting
Scrollsequence <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Evergreen Content Poster <= 1.4.1 - Reflected Cross-Site Scripting
Visual Composer Website Builder <= 45.6.0 - Authenticated (Editor+) Stored Cross-Site Scripting
WP Calameo <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting
GiveWP <= 3.3.1 - Reflected Cross-Site Scripting
ARMember <= 4.0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
The Moneytizer <= 9.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Calendarista Basic Edition <= 3.0.2 - Unauthenticated Cross-Site Scripting
Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url
Five Star Restaurant Menu <= 2.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
YITH WooCommerce Product Add-Ons <= 4.5.0 - Unuathenticated Cross-Site Scripting
ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.