Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersAdvanced Product Fields (Product Addons) for WooCommerce <= 1.6.21 - Unauthenticated Improper Input Validation to Price Bypass via Add-to-Cart POST Request
YayCurrency – WooCommerce Multi-Currency Switcher < 3.3.5 - Unauthenticated Information Exposure
Membership For WooCommerce < 3.1.2 - Unauthenticated Information Exposure
Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure
Urna - All-in-one WooCommerce WordPress Theme <= 2.6.2 - Unauthenticated Stored Cross-Site Scripting
Aora - Home & Lifestyle Elementor WooCommerce Theme <= 1.3.19 - Unauthenticated Stored Cross-Site Scripting
Abandoned Cart Pro for WooCommerce <= 10.4.0 - Unauthenticated Privilege Escalation
Extra Product Options Builder for WooCommerce < 1.2.176 - Missing Authorization
E-cab Taxi Booking Manager for Woocommerce < 2.0.8 - Missing Authorization
TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme <= 5.12.3 - Unauthenticated SQL Injection
Paymob for WooCommerce <= 4.1.10 - Unauthenticated Stored Cross-Site Scripting
Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.8 - Unauthenticated Stored Cross-Site Scripting
Swatchly – Product Variation Swatches for WooCommerce <= 1.4.13 - Unauthenticated Stored Cross-Site Scripting
Flutterwave WooCommerce <= 3.3.0 - Missing Authorization
YITH WooCommerce Membership Premium <= 2.33.0 - Authenticated (Subscriber+) SQL Injection
MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics <= 1.6.7 - Missing Authorization
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.17 - Missing Authorization
Piraeus Bank WooCommerce Payment Gateway 3.2.0 - Missing Authorization
B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More <= 5.2.30 - Missing Authorization
License Manager for WooCommerce <= 3.0.18 - Authenticated (Customer+) SQL Injection
Razorpay for WooCommerce <= 4.8.7 - Unauthenticated Insecure Direct Object Reference
Eventin <= 4.1.20 - Authenticated (Contributor+) Insecure Direct Object Reference to Speaker Account Deletion
Eventin <= 4.1.20 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.