Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Essential WP Real Estate <= 1.1.3 - Reflected Cross-Site Scripting
Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode
WP-Asambleas <= 2.85.0 - Reflected Cross-Site Scripting
W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation
WebToffee WP Backup and Migration <= 1.5.3 - Unauthenticated Sensitive Information Exposure
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation
moseter <= 1.3.1 - Reflected Cross-Site Scripting
ElementInvader Addons for Elementor <= 1.2.6 - Authenticated (Contributor+) Local File Inclusion
Neon Product Designer <= 2.1.1 - Authenticated (Contributor+) SQL Injection
polka dots <= 1.2 - Reflected Cross-Site Scripting
WR Price List Manager For Woocommerce <= 1.0.8 - Authenticated (Subscriber+) Arbitrary File Upload
Gallery and Lightbox <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Microweber Cross-site Scripting vulnerability
Microweber Cross-site Scripting vulnerability
Microweber Cross-site Scripting vulnerability
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting
TCBD Auto Refresher <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP SPID Italia <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Accordion Slider Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
GatorMail SmartForms <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Perfect Portal Widgets <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dominion – Domain Checker for WPBakery <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Post Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.