Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Greenshift Query and Meta Addon < 3.9.2 - Authenticated (Subscriber+) SQL Injection
Collapsing Archives <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
SKT Blocks – Gutenberg based Page Builder <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
YARPP <= 5.30.10 - Missing Authorization
Droip < 2.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Change
Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Arbitrary Option Deletion
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Missing Authorization
Responsive Lightbox <= 2.4.7 - Missing Authorization
Beaver Builder <= 2.8.3.2 - Reflected Cross-Site Scripting
Timetics <= 1.0.23 - Authorization Bypass
Memberpress <= 1.11.34 - Missing Authorization
YellowPencil Visual CSS Style Editor <= 7.6.1 - Reflected Cross-Site Scripting
WP Armour Extended <= 1.26 - Cross-Site Request Forgery
Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Cross-Site Request Forgery
Esotera <= 1.2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPMobile.App <= 11.48 - Reflected Cross-Site Scripting
Magic Post Thumbnail <= 5.2.9 - Reflected Cross-Site Scripting
Envira Photo Gallery <= 1.8.14 - Missing Authorization
Propovoice Pro <= 1.7.0.3 - Unauthenticated SQL Injection
Delicious Recipes – WordPress Recipe Plugin <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
EmbedPress <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Brickscore <= 1.4.2.5 - Unauthenticated Stored Cross-Site Scripting
Web and WooCommerce Addons for WPBakery Builder <= 1.4.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.