Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWP Image Mask <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
GDPR CCPA Compliance Support <= 2.7.3 - Missing Authorization
Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
ElementInvader Addons for Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affiliates Manager Google reCAPTCHA Integration <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Embed and Integrate Etsy Shop <= 1.0.4 - Missing Authorization
Japanized For WooCommerce <= 2.6.40 - Cross-Site Request Forgery
SKT Blocks <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Coupons & Add to Cart by URL Links for WooCommerce <= 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dynamic Pricing & Discounts Lite for WooCommerce <= 2.0.3 - Cross-Site Request Forgery
The Business <= 1.6.1 - Unauthenticated PHP Object Injection
Exclusive Addons Elementor <= 2.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Url Rewrite Analyzer <= 1.3.3 - Missing Authorization
Change Add to Cart Button Text for WooCommerce <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Back Button Widget <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mega Menu Block <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Legal Pages <= 1.4.5 - Missing Authorization
Additional Custom Emails & Recipients for WooCommerce <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
EAN for WooCommerce <= 5.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.2.4 - Cross-Site Request Forgery
WP Job Portal <= 2.3.2 - Unauthenticated Insecure Direct Object Reference
Sitewide Discount for WooCommerce: Apply Discount to All Products <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Mapa Politico España <= 3.8.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.