Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersProduct Slider for WooCommerce <= 2.5.6 - Missing Authorization
Trust Payments Gateway (3DS2) <= 1.2.2 - Cross-Site Request Forgery
Tabs – Responsive Tabs with WooCommerce Product Tab Extension <= 3.6.0 - Authenticated (Admin+) Arbitrary Options Update
WPGraphQL WooCommerce <= 0.12.3 - Information Disclosure
WP ERP <=1.10.5 - Sensitive Data Exposure
Trust Payments Gateway (3DS2) <= 1.2.0 - Cross-Site Request Forgery
Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Homepage Product Organizer for WooCommerce <= 1.1 - Authenticated (Subscriber+) SQL Injection
MultiSafepay plugin for WooCommerce <= 4.15.0 - Arbitrary File Read
Abandoned Cart Recovery for WooCommerce by Autonami <= 2.1.1 - Missing Authorization
Web and WooCommerce Addons for WPBakery Builder <= 1.4.4.1 - Missing Authorization Checks
Booster for WooCommerce <= 5.5.9 - Reflected Cross-Site Scripting
Music Player for WooCommerce <= 1.0.172 - Authenticated (Admin+) Stored Cross-Site Scripting
Custom Product Tabs for WooCommerce <= 1.7.7 - Subscriber+ Settings Update
Discount Rules for WooCommerce <= 2.4.1 - Reflected Cross-Site Scripting
Dropshipping and affiliates for Amazon and woocommerce <= 1.4.3 - Missing Authorization
eBay Dropshipping and Affiliate by Wooshark <= 1.5.6 - Unprotected AJAX Actions
CDI – Collect and Deliver Interface for Woocommerce <= 5.1.9 - Multiple Cross-Site Scripting
WP Event Manager – Easily Build your Calendar of Events! <= 3.1.27 - Stored Cross Site Scripting
WooCommerce <= 6.5.1 - Authenticated (Admin+) HTML Injection
WooCommerce – Product Importer <= 1.5.2 - Reflected Cross-Site Scripting
WooCommerce PDF Invoices & Packing Slips <= 2.15.0 - Reflected Cross-Site Scripting
Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.