Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWoocommerce Vietnam Checkout <= 2.0.4 - Reflected Cross-Site Scripting
Product Reviews Import Export for WooCommerce <= 1.4.8 - CSV Injection
All-In-One Security <= 5.1.2 - Information Disclosure
Image Optimizer, Resizer and CDN – Sirv <= 6.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Team Members <= 5.2.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Cryptocurrency Widgets Pack <= 2.0 - Unauthenticated SQL Injection
Superio - Job Board <= 1.2.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting
LetsRecover <= 1.1.0 - Authenticated (Admin+) SQL Injection
WP User <= 7.0 - Unauthenticated SQL Injection
LetsRecover <= 1.1.0 - Authenticated (Admin+) SQL Injection
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
Custom Field Template <= 2.5.7 - Authenticated (Administrator+) PHP Object Injection
WP-Lister Lite for Amazon <= 2.4.2 - Reflected Cross-Site Scripting
Visual Email Designer for WooCommerce <= 1.7.1 - Authenticated (Author+) SQL Injection
Joy Of Text Lite – SMS messaging for WordPress <= 2.3.0 - Unauthenticated SQL Injection
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection
White Label CMS <= 2.4 - Authenticated (Administrator+) PHP Object Injection
Wholesale Market for WooCommerce <= 2.0.0 & Wholesale Market <= 2.2.1 - Cross-Site Request Forgery
Moosend Website Connector <= 1.0.189 - Missing Authorization
Product list Widget for Woocommerce <= 1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.