Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersWpEvently <= 5.0.4 - Missing Authorization
Payment Gateway for PayPal on WooCommerce <= 9.0.53 - Missing Authorization
Cart Weight for WooCommerce <= 1.9.11 - Missing Authorization
OnPay.io for WooCommerce <= 1.0.47 - Missing Authorization
Show Variations as Single Products Woocommerce <= 2.0 - Missing Authorization
Virtuaria PagBank / PagSeguro para Woocommerce <= 3.6.3 - Missing Authorization
FireBox <= 3.1.0-free - Authenticated (Contributor+) Stored Cross-Site Scripting
Hide Category by User Role for WooCommerce <= 2.3.1 - Missing Authorization to Unauthenticated Cache Flushing
Customer Reviews Collector for WooCommerce <= 4.6.1 - Reflected Cross-Site Scripting
SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypass
ERP <= 1.16.6 - Authenticated (Subscriber+) Information Exposure
QODE Wishlist for WooCommerce <= 1.2.7 - Unauthenticated Insecure Direct Object Reference to Wishlist Update
Quick View for WooCommerce <= 2.2.17 - Unauthenticated Private Product Disclosure
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated User Impersonation in Order Messages
Refund Request for WooCommerce <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Refund Status Update
Wishlist for WooCommerce <= 1.1.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection
Custom Order Numbers for WooCommerce <= 1.11.0 - Missing Authorization
PopupKit <= 2.1.5 - Authenticated (Subscriber+) SQL Injection
TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization
Magical Products Display <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via MPD Pricing Table Widget
BigBuy Dropshipping Connector for WooCommerce <= 2.0.5 - Unauthenticated IP Spoofing to phpinfo() Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.