Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filtersMaterial Design Icons for Page Builders <= 1.4.2 - Cross-Site Request Forgery
JetWidgets For Elementor <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification
Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation
Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation
Exclusive Addons for Elementor <= 2.6.1 - Cross-Site Request Forgery
JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update
Portfolio for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Woo Products Widgets For Elementor <= 1.0.7 - Authenticated (Contributor+) Stored Cross Site Scripting
Appsero <= 1.2.1 - Missing Authorization
Royal Elementor Addons <=1.3.55 - Missing Authorization to Subscriber+ Arbitrary Post Creation
Royal Elementor Addons <=1.3.55 - Authenticated (Subscriber+) Arbitrary Post Deletion
Appsero <= 1.2.0 - Cross-Site Request Forgery
Responsive Starter Templates – Elementor & WordPress Templates <= 2.6.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Responsive Starter Templates – Elementor & WordPress Templates <= 2.6.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.