Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersBarcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated SQL Injection via userToken
MailerLite – WooCommerce integration <= 2.0.8 - Cross-Site Request Forgery via Multiple AJAX Functions
LiveChat WooCommerce <= 2.2.16 - Cross-Site Request Forgery
MailerLite – WooCommerce integration <= 2.0.8 - Missing Authorization via Multiple Functions
Revolut Gateway for WooCommerce <= 4.9.7 - Missing Authorization
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated Arbitrary File Upload via uploadFile
Booster Elite for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
WooCommerce <= 8.2.2 - Cross-Site Request Forgery
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Arbitrary Page/Post Deletion
Booster Plus for WooCommerce < 7.1.3 - Missing Authorization to Arbitrary Options Disclosure
WP ERP <= 1.12.8 - Authenticated (Accounting manager+) SQL Injection
WooCommerce Tranzila Gateway <= 1.0.8 - Unauthenticated PHP Object Injection
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
WooCommerce Conversion Tracking <= 2.0.11 - Missing Authorization
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Laybuy Payment Extension for WooCommerce <= 5.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Delivery Date for WooCommerce – Lite <= 2.7.0 - Missing Authorization
Product Expiry for WooCommerce <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
WP SMS <= 6.5 - Cross-Site Request Forgery to Subscriber Deletion
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.3.0 - Missing Authorization to Order Export
WooCommerce Product Vendors <= 2.2.2 - Missing Authorization
Product Enquiry for WooCommerce <= 3.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.