Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 30
Reset filtersYayReviews 1.0.4 - 1.4.0 - Unauthenticated Information Exposure
Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter
Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization
Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored Cross-Site Scripting
Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form
Customer Reviews for WooCommerce <= 5.115.0 - Missing Authorization
Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute
Customer Reviews for WooCommerce <= 5.110.1 - Unauthenticated Stored Cross-Site Scripting
Customer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch'
Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter
Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter
Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter
Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter
Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation
Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's'
Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search
Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review
Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload
Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via CR_Manual
Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via manual review reminders
Customer Reviews for WooCommerce <= 5.38.1 - Cross-Site Request Forgery via manual review reminders
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization in Reviews Exporter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.