Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersSocial Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injection
WEN Responsive Columns <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Permalink Manager Lite <= 2.4.3 - Reflected Cross-Site Scripting
Elementor Addon Elements <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
Ticket Tailor <= 1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Popups <= 2.1.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Link Whisper Free <= 0.6.8 - Reflected Cross-Site Scripting
SupportCandy <= 3.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Builder for WooCommerce reviews shortcodes – ReviewShort <= 1.01.3 - Cross-Site Request Forgery
ElementInvader Addons for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
HT Easy GA4 ( Google Analytics 4 ) <= 1.1.7 - Reflected Cross-Site Scripting
Barcode Scanner with Inventory & Order Manager <= 1.5.3 - Reflected Cross-Site Scripting
Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates <= 2.6.6 - Missing Authorization to Unauthenticated Information Exposure
User profile <= 2.0.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Site Reviews <= 6.11.6 - Authenticated (Author+) Stored Cross-Site Scripting
Word Replacer Pro <= 1.0 - Missing Authorization to Unauthenticated Arbitrary Content Update
MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts
ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection
Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elements Plus! <= 2.16.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.