Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersZIP Code Based Content Protection <= 1.0.0 - Authenticated (Administrator+) SQL Injection
Easy Woocommerce Customizer <= 1.0.2 - Reflected Cross-Site Scripting
Scape <= 1.5.13 - Unauthenticated PHP Object Injection
Toast Mobile Menu <= 1.0.8 - Unauthenticated Stored Cross-Site Scripting
Permalink Manager Lite <= 2.5.1.3 - Unauthenticated Sensitive Information Exposure
UDesign Core <= 4.14.0 - Reflected Cross-Site Scripting
Kallyas <= 4.22.0 - Authenticated (Contributor+) Arbitrary File Upload
UDesign Core <= 4.14.0 - Missing Authorization
Travel Booking WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Travel Booking WordPress Theme < 3.2.3 - Reflected Cross-Site Scripting
Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode
SKT Addons for Elementor <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Admin Menu Editor <= 1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder Parameter
aThemes Addons for Elementor Lite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Smart Table Builder <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
StreamWeasels Kick Integration <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via vodsChannel Parameter
Content Views <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Grid and List Widgets
Optio Dentistry <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Html Social share buttons <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Rehub <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost
Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure
Bulk Watermark <= 1.6.10 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.