Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filtersTemplately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Write
Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'
Anarkali <= 1.0.9 - Unauthenticated Local File Inclusion
Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
X Addons for Elementor <= 1.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Essential Addons for Elementor <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injection
Absolute Addons For Elementor <= 1.0.14 - Missing Authorization
FreeAgent <= 2.1.2 - Unauthenticated Local File Inclusion
Graphist <= 1.2.10 - Missing Authorization
Watcher for Elementor <= 1.0.9 - Missing Authorization
Questionar for Elementor <= 1.1.7 - Missing Authorization
Walker for Elementor <= 1.1.6 - Missing Authorization
Conformer for Elementor <= 1.0.7 - Missing Authorization
Criptopayer for Elementor <= 1.0.1 - Missing Authorization
Worker for Elementor <= 1.0.10 - Missing Authorization
Couponer for Elementor <= 1.1.7 - Missing Authorization
Logger for Elementor <= 1.0.9 - Missing Authorization
Sliper for Elementor <= 1.0.10 - Missing Authorization
Countdowner for Elementor <= 1.0.4 - Missing Authorization
Master Addons for Elementor <= 2.0.9.9.4 - Unauthenticated Insecure Direct Object Reference
Gmaper for Elementor <= 1.0.9 - Missing Authorization
Headinger for Elementor <= 1.1.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.