Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersLWS Affiliation <= 2.3.4 - Missing Authorization
Maintenance & Coming Soon Redirect Animation <= 2.3.0 - IP Spoofing to Bypass
Tempera <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
LatePoint <= 4.9.91 - Cross-Site Request Forgery
azurecurve Toggle Show/Hide <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Classic Addons – WPBakery Page Builder <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
JobSearch <= 2.5.4 - Missing Authorization
GHActivity <= 2.0.0-alpha - Authenticated (Contributor+) Stored Cross-Site Scripting
Animated Number Counters <= 2.1 - Authenticated (Editor+) Local File Inclusion
WP Testimonial Widget <= 3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
IntoTheDark <= 1.0.5 - Reflected Cross-Site Scripting
Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Settings Update
JobSearch <= 2.5.3 - Cross-Site Request Forgery
Greenshift Query and Meta Addon < 3.9.2 - Authenticated (Subscriber+) SQL Injection
Collapsing Archives <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
SKT Blocks – Gutenberg based Page Builder <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
YARPP <= 5.30.10 - Missing Authorization
Droip < 2.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Change
Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Arbitrary Option Deletion
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Missing Authorization
Responsive Lightbox <= 2.4.7 - Missing Authorization
Beaver Builder <= 2.8.3.2 - Reflected Cross-Site Scripting
Timetics <= 1.0.23 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.