Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersPenci Shortcodes & Performance <= 6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Landing Page Builder <= 1.5.3.4 - Authenticated (Author+) Stored Cross-Site Scripting
Terms descriptions <= 3.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Suggestion Toolkit <= 5.0 - Missing Authorization
Neoforum <= 1.0 - Reflected Cross-Site Scripting
Neoforum <= 1.0 - Authenticated (Administrator+) SQL Injection
File Uploads Addon for WooCommerce <= 1.7.3 - Missing Authorization
Logo Slider <= 5.5.3 - Authenticated (Author+) Stored Cross-Site Scripting
Trusona for WordPress <= 2.0.0 - Missing Authorization
Copyscape Premium <= 1.4.1 - Cross-Site Request Forgery
Merge + Minify + Refresh <= 2.14 - Cross-Site Request Forgery
Crumber <= 1.0.10 - Missing Authorization
RegistrationMagic <= 6.0.6.9 - Cross-Site Request Forgery
Creator LMS <= 1.1.12 - Missing Authorization
TheGem Theme Elements (for Elementor) <= 5.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Soledad <= 8.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
TheGem Theme Elements (for Elementor) <= 5.11.0 - Authenticated (Contributor+) Local File Inclusion
Uper for Elementor <= 1.0.5 - Missing Authorization
TheGem Theme Elements (for WPBakery) <= 5.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Templately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Write
User Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post Deletion
Web Accessibility with Max Access <= 2.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Stylish Cost Calculator < 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.