Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersWooCommerce <= 9.4.2 - PostMessage-Based Cross-Site Scripting
Yozi <= 2.0.63 - Unauthenticated Local File Inclusion
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Remote Code Execution
Splitit <= 4.2.8 - Missing Authorization to Multiple Administrative Actions
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Privilege Escalation
MultiVendorX <= 4.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Year Make Model Search for WooCommerce <= 1.0.11 - Cross-Site Request Forgery
Product Notes Tab & Private Admin Notes for WooCommerce <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cost of Goods for WooCommerce <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Active Products Tables for WooCommerce <= 1.0.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wishlist for WooCommerce <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Code for WooCommerce <= 1.5.0 - Cross-Site Request Forgery to Database Update
Bot for Telegram on WooCommerce <= 1.2.6 - Missing Authorization
Japanized For WooCommerce <= 2.6.40 - Cross-Site Request Forgery
Coupons & Add to Cart by URL Links for WooCommerce <= 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dynamic Pricing & Discounts Lite for WooCommerce <= 2.0.3 - Cross-Site Request Forgery
Change Add to Cart Button Text for WooCommerce <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Additional Custom Emails & Recipients for WooCommerce <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
EAN for WooCommerce <= 5.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sitewide Discount for WooCommerce: Apply Discount to All Products <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bux Woocommerce <= 1.2.3 - Missing Authorization
WP Tabs <= 2.2.12 - Authenticated (Administrator+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.