Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 26
Reset filtersBEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Authenticated (Custom Role+) Insecure Direct Object Reference
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Cross-Site Request Forgery
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Cross-Site Request Forgery
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion
BEAR <= 1.1.7.1 - Authenticated (Shop manager+) SQL Injection
BEAR <= 1.1.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
BEAR <= 1.1.4.3 - Missing Authorization
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.4.2 - Reflected Cross-Site Scripting
BEAR <= 1.1.4 - Missing Authorization via Several Functions
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Deletion
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.