Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersBWD Elementor Addons <= 4.3.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Daisycon prijsvergelijkers <= 4.8.4 - Authenticated (Contributor+) SQL Injection
Embed Chessboard <= 3.07.00 - Authenticated (Contributor+) Stored Cross-Site Scripting
CMP – Coming Soon & Maintenance <= 4.1.13 - Authenticated (Admin+) Arbitrary File Upload
B Blocks - The ultimate block collection <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Table Block by Tableberg <= 0.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Video Playlist For YouTube <= 6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
ez Form Calculator - WordPress plugin <= 2.14.1.2 - Reflected Cross-Site Scripting
Showeblogin Social <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPBookit <= 1.0.7 - Missing Authorization
Contact Form Builder by vcita <= 4.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Google Maps <= 1.11.18 - Authenticated (Author+) XML Entity Injection
m1.DownloadList <= 0.23 - Authenticated (Contributor+) Sensitive Information Disclosure
YaMaps for WordPress <= 0.6.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
Turbo Addons for Elementor <= 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
AdMail – Multilingual Back in-Stock Notifier for WooCommerce <= 1.7.0 - Missing Authorization
MasterStudy LMS <= 3.5.28 - Authenticated (Contributor+) Local File Inclusion
Post to Social Media – WordPress to Hootsuite <= 1.5.9 - Cross-Site Request Forgery
UltraAddons <= 2.0.0 - Cross-Site Request Forgery
Split Test For Elementor <= 1.8.3 - Authenticated (Editor+) SQL Injection
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.3 - Cross-Site Request Forgery
Display product variations dropdown on shop page <= 1.1.3 - Missing Authorization
SurveyJS <= 1.12.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.