Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.77 - Unauthenticated Stored Cross-Site Scripting
Black Widgets For Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Eventin <= 4.0.5 - Authenticated (Author+) Stored Cross-Site Scripting
Filter & Grids <= 2.8.33 - Cross-Site Request Forgery
Black Widgets For Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress File Upload <= 4.24.7 - Missing Authorization
LearnPress <= 4.2.6.8.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Custom 404 Pro <= 3.11.1 - Reflected Cross-Site Scripting
WP Social Feed Gallery <= 4.3.9 - Missing Authorization
Kubio AI Page Builder <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tin Canny Reporting for LearnDash <= 4.3.0.7 - Reflected Cross-Site Scripting
Extensions for Elementor <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
LearnPress <= 4.2.6.8.2 - Cross-Site Request Forgery
VikRentCar <= 1.4.0 - Unauthenticated SQL Injection
RegistrationMagic <= 6.0.0.1 - Unauthenticated Stored Cross-Site Scripting
WooCommerce PDF Vouchers <= 4.9.4 - Missing Authorization
Message Filter for Contact Form 7 <= 1.6.1.1 - Reflected Cross-Site Scripting
Tutor LMS <= 2.7.2 - Cross-Site Request Forgery
Sign-up Sheets <= 2.2.12 - Missing Authorization
Easy Digital Downloads <= 3.2.12 - Unauthenticated SQL Injection
WooCommerce PDF Vouchers <= 4.9.4 - Reflected Cross-Site Scripting
Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Fast Total Search <= 1.68.232 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.