Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWPFunnels <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
ResponsiveVoice Text To Speech <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import
WP-ShowHide <= 1.04 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
User Meta Manager <= 3.4.9 - Cross Site Request Forgery
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update
PPWP – WordPress Password Protect Page <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification
Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting
YourChannel <= 1.2.1 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
Page View Count <= 2.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation
Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation
PDF.js Viewer <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Clean Login <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Easy Testimonials <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mega Main Menu <= 2.2.2 - Information Disclosure
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.