Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersReviewX <= 1.6.7 - Unauthenticated CSV Injection
Stamped.io Product Reviews & UGC for WooCommerce <= 2.3.3 - Cross-Site Request Forgery
Coupon Affiliates <= 5.4.5 - Reflected Cross-Site Scripting via 'page'
Stock Exporter for WooCommerce <= 1.1.0 - Cross-Site Request Forgery
Stamped.io Product Reviews & UGC for WooCommerce <= 2.3.2 - Missing Authorization
MC Woocommerce Wishlist <= 1.5.4 - Cross-Site Request Forgery
Cancel order request WooCommerce <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
MyCryptoCheckout <= 2.123 - Reflected Cross-Site Scripting via url
WCFM Frontend Manager <= 6.6.0 - Missing Authorization
Product Feed PRO for WooCommerce <= 12.4.4 - Cross-Site Request Forgery
WCFM Membership <= 2.10.0 - Missing Authorization
WCFM Marketplace <= 3.4.11 - Missing Authorization
WCFM Frontend Manager <= 6.5.13 - Cross-Site Request Forgery
WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery
WCFM Membership <= 2.9.10 - Cross-Site Request Forgery
WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation
Product page shipping calculator for WooCommerce <= 1.3.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Product Enquiry for WooCommerce <= 2.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Order date time for WooCommerce <= 3.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Coupon Affiliates <= 5.4.3 - Unauthenticated Stored Cross-Site Scripting
Conditional cart fee / Extra charge rule for WooCommerce extra fees <= 1.0.96 - Authenticated (Administrator+) Stored Cross-Site Scripting
Advanced Local Pickup for WooCommerce <= 1.5.2 - Cross-Site Request Forgery
Swatchly – WooCommerce Variation Swatches for Products <= 1.2.0 - Cross-Site Request Forgery via plugin_activation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.