Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersWooCommerce <= 3.6.4 - Missing File Type Validation
Personalized WooCommerce Cart Page <= 2.4 - Cross-Site Request Forgery
Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery allowing Option Update
Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery
Revamp CRM for WooCommerce < 1.0.4 - Local File Inclusion
Finale WooCommerce Sale Countdown <= 2.9.0 - Authenticated Arbitrary File Upload
User Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Arbitrary Options Update
Woocommerce Products Price Bulk Edit <= 2.0 - Cross-Site Scripting via show_products_page_limit parameter
Advanced Woo Search <= 1.68 - Cross-Site Scripting
WooCommerce Checkout Manager <= 4.2.6 - Unauthenticated Arbitrary Media Deletion
Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting
WooCommerce Subscriptions < 2.6.3 - Stored Cross-Site Scripting
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
WooCommerce <= 3.5.4 - Stored Cross-Site Scripting
Newspaper < 9.2.2 - Cross-Site Scripting
Order XML File Export Import for WooCommerce < 1.2.3 - Cross-Site Scripting
WooCommerce <= 3.5.1 - Authenticated Stored Cross-Site Scripting
Woo Confirmation Email < 3.2.0 - Improper Access Control
WP Tabs – Responsive Tabs Plugin for WordPress <= 1.8.0 - Stored Cross-Site Scripting
WooCommerce <= 3.4.5 - WooCommerce File Deletion
WooCommerce <= 3.4.4 - Authenticated PHP Object Injection
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) < 4.1.8 - SQL Injection
Import Export WordPress Users and WooCommerce Customers <= 1.3.1 - CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.