Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersBinary MLM Woocommerce <= 2.0 - Reflected Cross-Site Scripting via 'page'
Binary MLM Woocommerce <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WooCommerce HSS Extension for Streaming Video <= 3.31 - Reflected Cross-Site Scripting via videolink Parameter
Compare Products for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting
Compare Products for WooCommerce <= 3.2.1 - Unauthenticated PHP Object Injection
Bizapp for WooCommerce <= 2.0.8 - Reflected Cross-Site Scripting
Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection
Themes Coder – Create Android & iOS Apps For Your Woocommerce Site <= 1.3.4 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation
Woomotiv <= 3.6.1 - Unauthenticated SQL Injection
Formaloo Form Maker & Customer Analytics for WordPress & WooCommerce <= 2.1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Product Table for WooCommerce <= 4.0.3 - Reflected Cross-Site Scripting
Pósturinn\'s Shipping with WooCommerce <= 1.3.1 - Reflected Cross-Site Scripting
MIPL WC Multisite Sync <= 1.1.5 - Unauthenticated Arbitrary File Download
WC Affiliate <= 2.3 - Reflected Cross-Site Scripting
SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Store credit / Gift cards for woocommerce <= 1.0.49.46 - Reflected Cross-Site Scripting
Korea for WooCommerce <= 1.1.11 - Authenticated (Subscriber+) Sensitive Information Exposure
Advanced Dynamic Pricing for WooCommerce <= 4.9.0 - Reflected Cross-Site Scripting
Kalium <= 3.18.3 - Reflected Cross-Site Scripting
Order Audit Log for WooCommerce <= 2.0 - Reflected Cross-Site Scripting
Allada T-shirt Designer for Woocommerce <= 1.1 - Missing Authorization
Multiple Shipping And Billing Address For Woocommerce <= 1.2 - Unauthenticated SQL Injection
워드프레스 결제 심플페이 <= 5.2.0 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.