Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersReformer for Elementor <= 1.0.6 - Missing Authorization
Buttoner for Elementor <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Settings Change
RTL Tester <= 1.2 - Cross-Site Request Forgery
BSK PDF Manager <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
Modalier for Elementor <= 1.0.6 - Missing Authorization
Media Library Tools <= 1.6.15 - Authenticated (Author+) SQL Injection
Spoter for Elementor <= 1.04 - Missing Authorization
Lottier <= 1.1.1 - Missing Authorization
Masker for Elementor <= 1.1.4 - Missing Authorization
Lottier for Elementor <= 1.0.9 - Missing Authorization
Widgets for Google Reviews <= 13.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trustindex Shortcode
List Category Posts <= 0.91.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request Forgery
WP CarDealer <= 1.2.16 - Unauthenticated Privilege Escalation
Leaky Paywall <= 4.22.6 - Missing Authorization
Motionger for Elementor <= 2.0.4 - Missing Authorization
Knowband Mobile App Builder <= 2.0.8 - Missing Authorization to Unauthenticated Arbitrary User Deletion
Searcher for Elementor <= 1.0.3 - Missing Authorization
Nelio Popups <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Homey Core <= 2.4.3 - Missing Authorization
Ultimate Post Kit <= 4.0.15 - Unauthenticated Information Disclosure
Audier For Elementor <= 1.0.9 - Missing Authorization
Scroller <= 2.0.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.