Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
BU Slideshow <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Advanced Video Player with Analytics <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Beacon For Help Scout <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Surbma | Font Awesome <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Th Shop Mania <= 1.4.9 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Sell Media File with Stripe <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP PagSeguro Payments <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Charity Addon for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Agenda <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Social Sharebar <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wd-image-magnifier-xoss <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
ra_qrcode <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
GreenCon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
audioCase <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Semantic Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Multifox Plus <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
L Squared Hub WP <= 1.0 - Authenticated (Contributor+) SQL Injection
IntelliWidget Elements <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Attesa Extra <= 1.4.2 - Authenticated (Contributor+) Post Disclosure
Web Stories Widgets For Elementor <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pro Addons For Elementor <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Location Click Map <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Browsing History <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.