Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersCost of Goods for WooCommerce <= 2.8.6 - Cross-Site Request Forgery in save_costs
ShopLentor <= 2.5.1 - Cross-Site Request Forgery to Post Updates
Mercado Pago payments for WooCommerce <= 6.3.1 - Cross-Site Request Forgery
CURCY <= 2.1.25 - Missing Authorization to Currency Exchange Retrieval
PayPal Brasil para WooCommerce <= 1.4.2 - Cross-Site Request Forgery
All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 5.2.3 - Cross-Site Request Forgery
Cost of Goods for WooCommerce <= 2.8.6 - Missing Authorization in save_costs
WordPress Comments Import & Export <= 2.3.1 - CSV Injection
WebinarIgnition <= 2.14.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Print Invoice & Delivery Notes for WooCommerce <= 4.7.1 - Reflected Cross-Site Scripting
Side Cart Woocommerce (Ajax) < 2.1 - Cross-Site Request Forgery
WP Tabs <= 2.1.14 - Cross Site Request Forgery
GS Products Slider for WooCommerce <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WooLentor <= 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WooLentor <= 2.5.3 - PHP Object Injection
WooCommerce PDF Invoices & Packing Slips <= 3.2.5 - Cross Site Request Forgery
Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration <= 1.62.0 - Authenticated (Admin+) Cross Site Scripting
Ecwid Ecommerce Shopping Cart <= 6.11.3 - Cross Site Request Forgery
Customer Reviews for WooCommerce <= 5.16.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Customer Reviews for WooCommerce <= 5.15.0 - Authenticated (Subscriber+) Local File Inclusion
Mercado Pago payments for WooCommerce <= 6.6.0 - Cross-Site Request Forgery
Stripe Payments For WooCommerce by Checkout Plugins <= 1.4.10 - Cross-Site Request Forgery
PickPlugins Product Slider for WooCommerce <= 1.13.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.