Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersAnalyse Uploads <= 0.5 - Unauthenticated Arbitrary File Deletion
ajax-extend <= 1.0 - Unauthenticated Remote Code Execution
Primary Addon for Elementor <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dynamic Elementor Addons <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Wsify Widget <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Better Author Bio <= 2.7.10.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Tito <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ahime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Download
Table of Contents Plus <= 2408 - Cross-Site Request Forgery
cSlider <= 2.4.2 - Cross-Site Request Forgery
bVerse Convert <= 1.3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Free Stock Photos Foter <= 1.5.4 - Authenticated (Subscriber+) PHP Object Injection
ADIF Log Search Widget <= 1.0f - Reflected Cross-Site Scripting
Social Auto Poster <= 5.3.15 - Cross-Site Request Forgery
Feed Comments Number <= 0.2.1 - Unauthenticated Arbitrary File Upload
CJ Change Howdy <= 3.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
BuddyPress Better Registration <= 1.6 - Authentication Bypass to Administrator
TAKETIN To WP Membership <= 2.8.12 - Authenticated (Subscriber+) PHP Object Injection
WordPress Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Booking.com Banner Creator <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ajax Custom CSS/JS <= 2.0.4 - Reflected Cross-Site Scripting
Ad Inserter <= 2.7.37 - Reflected Cross-Site Scripting
Unlimited Addon For Elementor <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.