Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersAhaChat Messenger Marketing <= 1.1 - Unauthenticated Stored Cross-Site Scripting
Directorist <= 8.6.6 - Missing Authorization
Simple Folio <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Client name' and 'Link' Meta Fields
PhotoMe <= 5.6.11 - Unauthenticated PHP Object Injection
ConveyThis <= 270.4 - Missing Authorization
ModelTheme Addons for WPBakery and Elementor < 1.5.6 - Authenticated (Contributor+) PHP Object Injection
افزونه پیامک حرفه ای فراز اس ام اس <= 2.7.3 - Reflected Cross-Site Scripting
VidShop – Shoppable Videos for WooCommerce <= 1.1.4 - Unauthenticated Time-Based SQL Injection via 'fields'
WPLegalPages <= 3.5.4 - Missing Authorization
Crete Core <= 1.4.3 - Unauthenticated SQL Injection
eDS Responsive Menu <= 1.2 - Reflected Cross-Site Scripting
Buy Now Plus <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
WP Adminify <= 4.0.7.7 - Unauthenticated Sensitive Information Exposure via 'get-addons-list' REST API
Gauge <= 6.56.4 - Missing Authorization
NextMove Lite <= 2.23.0 - Missing Authorization
Prague <= 2.2.8 - Reflected Cross-Site Scripting
iSape <= 0.72 - Reflected Cross-Site Scripting
Recipe Card Blocks for Gutenberg & Elementor < 3.4.13 - Authenticated (Contributor+) SQL Injection
HAPPY <= 1.0.8 - Missing Authorization
Mopinion Feedback Form <= 1.1.1 - Reflected Cross-Site Scripting
Stop Spammers Classic <= 2026.1 - Cross-Site Request Forgery via Email Allowlist
Simple Archive Generator <= 5.2 - Reflected Cross-Site Scripting
FeedWordPress Advanced Filters <= 0.6.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.