Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersReview Stars Count For WooCommerce <= 2.0 - Authenticated (Subscriber+) SQL Injection
ChillPay WooCommerce <= 2.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Woo Product Feed For Marketing Channels <= 1.9.0 - Missing Authorization
ABA PayWay Payment Gateway for WooCommerce <= 2.1.4 - Reflected Cross-Site Scripting
Pagopar – WooCommerce Gateway <= 2.7.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Epeken All Kurir <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
MyWorks WooCommerce Sync for QuickBooks Online <= 2.9.1 - Reflected Cross-Site Scripting
Anant Addons for Elementor <= 1.1.8 - Cross-Site Request Forgery to Arbitrary Plugin Installation
WooCommerce Pickupp <= 2.4.0 - Unauthenticated Local File Inclusion
FraudLabs Pro for WooCommerce <= 2.22.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WooCommerce – Payphone Gateway <= 3.2.0 - Reflected Cross-Site Scripting
Neon Product Designer <= 2.1.1 - Unauthenticated SQL Injection
WooCommerce – Store Exporter <= 2.7.4 - Reflected Cross-Site Scripting
Oxygen MyData for WooCommerce <= 1.0.64 - Unauthenticated Arbitrary File Deletion
WooCommerce Multilingual & Multicurrency <= 5.3.8 - Missing Authorization
Bulk Product Sync <= 8.6 - Unauthenticated SQL Injection
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection
CardGate Payments for WooCommerce <= 3.2.1 - Authenticated (Administrator+) SQL Injection
Funnel Builder for WordPress by FunnelKit <= 3.10.1 - Authenticated (Administrator+) SQL Injection
Nomupay Payment Processing Gateway <= 7.1.5 - Authenticated (Subscriber+) Arbitrary File Download
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce 1.0.4 - 1.2.1 - Missing Authorization to Unauthenticated Limited Arbitrary Options Update
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.