Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersFree Woocommerce Product Table View <= 1.78 - Missing Authorization
Shiptimize for WooCommerce <= 3.1.86 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Ni WooCommerce Cost Of Goods <= 3.2.8 - Missing Authorization
Bulk Product Sync <= 8.6 - Cross-Site Request Forgery
Simple Sticky Add To Cart For WooCommerce <= 1.4.6 - Missing Authorization
WpTravelly <= 1.8.7 - Authenticated (Contributor+) PHP Object Injection
Product Table by WBW <= 2.1.4 - Reflected Cross-Site Scripting
WP Optin Wheel <= 1.4.7 - Authenticated (Admin+) Server-Side Request Forgery
Product Notices for WooCommerce <= 1.3.3 - Cross-Site Request Forgery
WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce <= 1.3.5 - Authenticated (Contributor+) Privilege Escalation
OpenAI Tools for WordPress & WooCommerce <= 2.1.5 - Missing Authorization
Order Splitter for WooCommerce <= 5.3.0 - Authenticated (Subscriber+) SQL Injection
Printus <= 1.2.6 - Missing Authorization
YayExtra <= 1.5.2 - Missing Authorization
Advanced WooCommerce Product Sales Reporting <= 4.1.1 - Unauthenticated SQL Injection
Vitepos <= 3.1.4 - Missing Authorization
SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation
ELEX WooCommerce Request a Quote <= 2.3.9 - Missing Authorization
Booster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ni WooCommerce Product Enquiry <= 4.1.8 - Missing Authorization
Next-Cart Store to WooCommerce Migration <= 3.9.4 - Unauthenticated SQL Injection
Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.