Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersCoupon Affiliates <= 6.4.1 - Missing Authorization to Unauthenticated Settings Update
Riode | Multi-Purpose WooCommerce <= 1.6.23 - Unauthenticated Local File Inclusion
Druco <= 1.5.2 - Reflected Cross-Site Scripting
UpStore <= 1.7.0 - Reflected Cross-Site Scripting
Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
StoreKeeper for WooCommerce <= 14.4.4 - Unauthenticated Arbitrary File Upload
Product XML Feed Manager for WooCommerce <= 2.9.3 - Authenticated (Contributor+) Remote Code Execution
Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter
YITH WooCommerce Popup <= 1.48.0 - Cross-Site Request Forgery
Product Configurator for WooCommerce <= 1.4.4 - Cross-Site Request Forgery
WpEvently <= 4.4.6 - Missing Authorization
WPFunnels <= 3.5.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bonanza – WooCommerce Free Gifts Lite <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success
Finale Lite <= 2.20.0 - Reflected Cross-Site Scripting
PoloPag – Pix Automático para Woocommerce <= 2.0.9 - Unauthenticated Local File Inclusion
Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Unauthenticated Local File Inclusion
Premmerce Wishlist for WooCommerce <= 1.1.10 - Unauthenticated Local File Inclusion
Premmerce Product Search for WooCommerce <= 2.2.4 - Unauthenticated Local File Inclusion
NextMove Lite <= 2.21.0 - Reflected Cross-Site Scripting
MinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price Manipulation
WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation
WooCommerce Point Of Sale (POS) <= 1.4 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.