Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersWpTravelly <= 1.6.0 - Cross-Site Request Forgery
WebinarIgnition <= 3.05.8 - Cross-Site Request Forgery
Email Marketing for WooCommerce by Omnisend <= 1.14.3 - Cross-Site Request Forgery
WooCommerce UPS Shipping – Live Rates and Access Points <= 2.2.4 - Cross-Site Request Forgery
NextMove Lite <= 2.18.1 - Cross-Site Request Forgery
Finale Lite <= 2.18.0 - Cross-Site Request Forgery
Product Feed on WooCommerce for Google <= 3.5.7 - Authenticated (Administrator+) SQL Injection
Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Cross-Site Request Forgery
MultiParcels Shipping For WooCommerce < 1.16.9 - Cross-Site Request Forgery
USPS Shipping for WooCommerce – Live Rates <= 1.9.2 - Cross-Site Request Forgery
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injection
Premmerce Product Filter for WooCommerce <= 3.7.2 - Missing Authorization
WP2LEADS <= 3.2.7 - Missing Authorization
Ultimate Store Kit Elementor Addons <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Cross-Site Request Forgery
WooCommerce <= 8.5.2 - Cross-Site Request Forgery
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Reflected Cross-Site Scripting
Product Designer <= 1.0.32 - Unauthenticated PHP Object Injection
Sumo <= 1.34 - Cross-Site Request Forgery
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset
Flexible Checkout Fields for WooCommerce <= 4.1.2 - Missing Authorization
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.