Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersWooCommerce Shipping – DPD baltic <= 1.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Helloprint <= 1.4.6 - Reflected Cross-Site Scripting
YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery
YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization
S2W – Import Shopify to WooCommerce <= 1.1.12 - Authenticated (Admin+) Local File Inclusion
Checkout Field Editor <= 1.7.2 - Authenticated (Admin+) PHP Object Injection
Export customers list csv for WooCommerce <= 2.0.67 - CSV Injection
a3 Lazy Load <= 2.6.0 - Cross-Site Request Forgery to Settings Reset
TeraWallet – For WooCommerce <= 1.4.3 - Insecure Direct Object Reference
Booster Elite for WooCommerce < 1.1.7 - Cross-Site Request Forgery
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Cross-Site Request Forgery
Advanced Coupons for WooCommerce Coupons <= 4.5 - Cross-Site Request Forgery
TeraWallet – For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via lock_unlock_terawallet
Custom Product Tabs for WooCommerce <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Settings Disconnect
Creative Mail <= 1.5.4 - Cross-Site Request Forgery
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Plugin Deactivation
Booster Elite for WooCommerce < 1.1.7 - Authenticated (Admin/Shop Manager+) Arbitrary File Download
Booster for WooCommerce <= 5.6.6 - Cross-Site Request Forgery
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Cross-Site Request Forgery
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Missing Authorization
Phone Orders for WooCommerce <= 3.7.1 - Missing Authorization
tagDiv Composer < 3.5 - Unauthorized Account Access and Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.