Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
SMTP for SendGrid – YaySMTP <= 1.5 - Authenticated (Administrator+) SQL Injection
WP Delicious <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
GymBase Theme Classes <= 1.4 - Authenticated (Contributor+) SQL Injection
Image Wall <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Maya Business <= 1.2.0 - Unauthenticated Insecure Direct Object Reference
Bears Backup <= 2.0.0 - Unauthenticated Remote Code Execution
Easy Elementor Addons <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Formality <= 1.5.9 - Unauthenticated Local File Inclusion
Pinterest Automatic Pin < 4.19.0 - Authenticated (Subscriber+) SQL Injection
Chatbox Manager <= 1.2.5 - Missing Authorization
JetSmartFilters <= 3.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
FG Drupal to WordPress <= 3.90.0 - Authenticated (Admin+) Server-Side Request Forgery
WPAdverts <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Webba Booking <= 5.1.20 - Missing Authorization
JetBlocks For Elementor <= 1.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Plus Addons for Elementor Pro < 6.3.7 - Missing Authorization
Wallet System for WooCommerce <= 2.6.7 - Cross-Site Request Forgery
JetElements For Elementor <= 2.7.7 - Authenticated (Subscriber+) Information Disclosure
JetSearch <= 3.5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Widget for Google Reviews <= 1.0.15 - Unauthenticated Local File Inclusion
Youtube Vimeo Video Player and Slider <= 3.8 - Reflected Cross-Site Scripting
JetMenu <= 2.4.11.1 - Authenticated (Subscriber+) Information Exposure
JetWooBuilder <= 2.1.20 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.