Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersRead More & Accordion <= 3.4.7 - Cross-Site Request Forgery to Local File Inclusion
Email Notifications for Updates <= 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters
Spider Elements – Addons for Elementor <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Motors <= 1.4.71 - Authenticated (Contributor+) Stored Cross-Site Scripting
Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Download
WP w3all phpBB <= 2.9.8 - Cross-Site Request Forgery
DirectoryPress <= 3.6.22 - Cross-Site Request Forgery
WP Project Manager <= 2.6.24 - Cross-Site Request Forgery
WP ULike <= 4.7.9.1 - Missing Authorization to Unauthenticated Content Spoofing
Split Test For Elementor <= 1.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Xpro Theme Builder <= 1.2.8.4 - Missing Authorization
Ultra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
TableOn – WordPress Posts Table Filterable <= 1.0.5.1 - Missing Authorization
Colibri Page Builder <= 1.0.319 - Authenticated (Contributor+) Stored Cross-Site Scripting
Posts Footer Manager <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
DethemeKit For Elementor <= 2.1.10 - Missing Authorization
Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
RDP Wiki Embed <= 1.2.20 - Cross-Site Request Forgery
Secure Copy Content Protection and Content Locking <= 4.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Event Manager <= 3.2.0 - Missing Authorization
SurveyJS <= 1.12.20 - Missing Authorization
Woocommerce Role Pricing <= 3.5.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.