Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filtersTheGem <= 5.9.1 - Reflected Cross-Site Scripting
HT Mega – Absolute Addons For Elementor <= 2.3.8 - Reflected Cross-Site Scripting
LA-Studio Element Kit for Elementor <= 1.1.5 - Missing Authorization
EmbedPress <= 3.9.4 - Missing Authorization
Elementor <= 3.18.1 - Authenticated(Contributor+) Arbitrary File Upload to Remote Code Execution via Template Import
Royal Elementor Addons and Templates <= 1.3.80 - Missing Authorization to Private/Password Protected Post Read
PowerPack Pro for Elementor <= 2.9.23 - Reflected Cross-Site Scripting
JetElements For Elementor <= 2.6.13 - Missing Authorization to Unauthenticated Arbitrary Attachment Download
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action
JetBlocks For Elementor <= 1.3.8 - Reflected Cross Site Scripting
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery
EmbedPress <= 3.9.1 - Reflected Cross-Site Scripting
EmbedPress <= 3.9.1 - Reflected Cross-Site Scripting
Restaurant & Cafe Addon for Elementor <= 1.5.3 - Missing Authorization via multiple AJAX functions
Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10 - Missing Authorization to Template Import
Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
Events Addon for Elementor <= 2.1.2 - Missing Authorization
Restaurant & Cafe Addon for Elementor <= 1.5.2 - Cross-Site Request Forgery
Integration for Contact Form 7 and Constant Contact <= 1.1.4 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.