Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersSearch order by product SKU for WooCommerce <= 0.2 - Reflected Cross-Site Scripting
ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CF7 WOW Styler <= 1.6.8 - Reflected Cross-Site Scripting
Daily Image <= 1.0 - Reflected Cross-Site Scripting
Satisfaction Reports from Help Scout <= 2.0.3 - Reflected Cross-Site Scripting
Planning Center Online Giving <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
BBP Core – Expand bbPress powered forums with useful features <= 1.2.5 - Reflected Cross-Site Scripting via add_query_arg Parameter
APK Downloader <= 1.0.0 - Cross-Site Request Forgery to Stored Cross Site Scripting
Webriti Custom Login <= 0.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Cresta Addons for Elementor <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
SmartLink Dynamic URLs <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Random Featured Post <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
e-shops <= 1.0.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Simple Page Specific Sidebars <= 2.14.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Bricksable for Bricks Builder <= 1.6.59 - Authenticated (Administrator+) Stored Cross-Site Scripting
Accordion title for Elementor <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting
Knowledge Base <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
JS Help Desk – Best Help Desk & Support Plugin <= 2.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
GMO Social Connection <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Pocket URLs <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
SH Slideshow <= 4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media Library Assistant <= 3.19 - Authenticated (Administrator+) Remote Code Execution
Platform.ly Official <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.