Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filtersXpro Addons For Beaver Builder – Lite <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
ElementInvader Addons for Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Exclusive Addons Elementor <= 2.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Element Pack Pro <= 7.21.0 - Missing Authorization
X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Element Pack Pro <= 7.21.0 - Cross-Site Request Forgery
AnyWhere Elementor Pro <= 2.29 - Missing Authorization
UltraAddons Elementor Lite <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Drag and Drop File Upload for Elementor Forms <= 1.4.3 - Unauthenticated Arbitrary File Deletion
TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File Upload
TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update
Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets
Simple calendar for Elementor <= 1.6.5 - Cross-Site Request Forgery
Royal Elementor Addons <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting
Graphina <= 3.0.4 - Missing Authorization
Cost Calculator for Elementor <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gutenberg & Elementor Templates Importer For Responsive <= 3.1.9 - Missing Authorization
Integrations of Zoho CRM with Elementor form <= 1.0.7 - Open Redirect
Graphina <= 3.0.4 - Cross-Site Request Forgery to Local File Inclusion
Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting
FULL – Cliente 3.1.5 - 3.1.25 - Authenticated (Subscriber+) SQL Injection
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Update
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.