Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersDethemeKit For Elementor <= 2.1.10 - Missing Authorization
Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
RDP Wiki Embed <= 1.2.20 - Cross-Site Request Forgery
Secure Copy Content Protection and Content Locking <= 4.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Event Manager <= 3.2.0 - Missing Authorization
SurveyJS <= 1.12.20 - Missing Authorization
Woocommerce Role Pricing <= 3.5.5 - Cross-Site Request Forgery
Easy Contact <= 0.1.2 - Reflected Cross-Site Scripting
Ecwid Shopping Cart <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Emma for WordPress <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ai Image Alt Text Generator for WP <= 1.1.5 - Authenticated (Subscriber+) Sensitive Information Exposure
Administrator Z <= 2025.09.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
MasterStudy LMS <= 3.5.28 - Missing Authorization
Salon booking system <= 10.29.6 - Missing Authorization
Welcome Bar <= 2.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
News Kit Elementor Addons <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
ActiveCampaign <= 8.1.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.2 - Authenticated (Subscriber+) Sensitive Information Exposure
Musician's Pack for Elementor <= 1.8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Freetobook Responsive Widget <= 1.1 - Cross-Site Request Forgery
Easy WP Optimizer <= 1.1.0 - Missing Authorization
JobWP <= 2.3.9 - Cross-Site Request Forgery
Xpro Elementor Addons <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.