Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 19
Reset filtersJetElements <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
JetElements <= 2.9.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
JetElements For Elementor <= 2.7.12.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
JetElements For Elementor <= 2.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
JetElements For Elementor <= 2.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
JetElements For Elementor <= 2.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
JetElements For Elementor <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
JetElements For Elementor <= 2.7.7 - Authenticated (Subscriber+) Information Disclosure
JetElements For Elementor <= 2.7.4.1 - Missing Authorization
JetElements For Elementor <= 2.7.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
JetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion
JetElements For Elementor <= 2.6.13 - Missing Authorization to Unauthenticated Arbitrary Attachment Download
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery
JetElements <= 2.6.10 - Authenticated (Contributor+) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.