Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersMultifox <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
SetMore Theme – Custom Post Types <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
HireHive Job Plugin <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Posts Footer Manager <= 2.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Order By <= 1.4.2 - Reflected Cross-Site Scripting
Nativery <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tag Groups is the Advanced Way to Display Your Taxonomy Terms <= 2.0.4 - Reflected Cross-Site Scripting
Htaccess File Editor <= 1.0.19 - Unauthenticated Information Exposure
Mapbox for WP Advanced <= 1.0.0 - Reflected Cross-Site Scripting
Eazy Under Construction <= 1.0 - Reflected Cross-Site Scripting
Elementor AI Addons <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP ViewSTL <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup
Product Carousel For WooCommerce – WoorouSell <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Post Corrector <= 1.0.2 - Reflected Cross-Site Scripting
Brizy Pro <= 2.8.0 - Reflected Cross-Site Scripting
Post Carousel & Slider <= 1.0.4 - Reflected Cross-Site Scripting
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.3 - Unauthenticated Information Exposure
WP News Sliders <= 1.0 - Missing Authorization
Banner Garden Plugin for WordPress <= 0.1.3 - Reflected Cross-Site Scripting
Build Private Store For Woocommerce <= 1.0 - Cross-Site Request Forgery
Partners <= 0.2.0 - Reflected Cross-Site Scripting
Solidres <= 0.9.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.