Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersProductDyno <= 1.0.24 - Reflected Cross-Site Scripting
Envato Elements <= 2.0.14 - Authenticated (Author+) Server-Side Request Forgery
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Shop manager+) SQL Injection
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Reflected Cross-Site Scripting
ElementsCSS Addons for Elementor <= 1.0.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wizhi Multi Filters by Wenprise <= 1.8.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Hide Category by User Role for WooCommerce <= 2.1.1 - Missing Authorization
MG Parallax Slider <= 1.0 - Reflected Cross-Site Scripting
Digi Store <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
DynamicTags <= 1.4.0 - Authenticated (Subscriber+) SQL Injection
Private Messages for UserPro <= 4.10.0 - Reflected Cross-Site Scripting
WP Ultimate Exporter <= 2.9.1 - Authenticated (Admin+) Remote Code Execution
Media Category Library <= 2.7 - Reflected Cross-Site Scripting
Advanced Form Integration <= 1.95.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
SSL Wireless SMS Notification <= 3.5.0 - Unauthenticated SQL Injection
WPGuppy <= 1.1.0 - Authenticated (Subscriber+) Privilege Escalation
Social Media Share Buttons | MashShare <= 4.0.47 - Missing Authorization
Distance Based Shipping Calculator <= 2.0.21 - Reflected Cross-Site Scripting
UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection
EMC2 Alert Boxes <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP jQuery DataTable <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Highlight <= 2.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.