Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersFront End Users <= 3.2.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Post Carousel Slider for Elementor <= 1.7.0 - Missing Authorization
DriCub <= 2.9 - Unauthenticated Server-Side Request Forgery
Designil PDPA Thailand <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
AgreeMe Checkboxes For WooCommerce <= 1.1.3 - Cross-Site Request Forgery
Editor Custom Color Palette <= 3.4.8 - Missing Authorization
Penci Shortcodes & Performance < 6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Nextend Facebook Connect <= 3.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
BMI Adult & Kid Calculator <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress <= 6.8.2 - Authenticated (Contributor+) Sensitive Information Exposure
DriCub <= 2.9 - Missing Authorization
Double the Donation <= 2.0.0 - Cross-Site Request Forgery
WPComplete <= 2.9.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
LC Wizard <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Estonian Shipping Methods for WooCommerce <= 1.7.2 - Unauthenticated Sensitive Information Exposure
Gianism <= 6.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
WP User Frontend <= 4.1.12 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Widget Options - Extended <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Grid <= 2.3.1 - Cross-Site Request Forgery
WP Proposals <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Card Elements for WPBakery <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Last Updated Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Maps for WP <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.