Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersCsomagpontok és szállítási címkék WooCommerce hez <= 1.9.0.2 - Cross-Site Request Forgery
Advanced Order Export For WooCommerce <= 3.3.2 - Cross-Site Request Forgery
Wholesale Suite <= 2.1.5 - Cross-Site Request Forgery
WooCommerce Dropshipping Premium <= 4.3 - Unauthenticated SQL Injection
Role Based Pricing for WooCommerce <= 1.6.2 - Missing Authorization to PHAR Deserialization
Role Based Pricing for WooCommerce <= 1.6.1 - Authenticated (Subscriber+) Arbitrary File Upload
Account Manager for WooCommerce <= 2.1.1 - Missing Authorization
ALD - AliExpress Dropshipping and Fulfillment for WooCommerce Premium <= 1.1.0 - Sensitive Information Disclosure
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Official Integration for Billingo <= 3.3.9 - Reflected Cross-Site Scripting
WooCommerce Products Vendor <= 2.1.65 - Unauthenticated SQL Injection
WooCommerce Products Vendor <= 2.1.68 - Insecure Direct Object Reference to Vendor Commission Percentage Update
WooCommerce Products Vendor <= 2.1.65 - Insecure Direct Object Reference to Note Creation
WZone - Lite <= 3.1 - Cross-Site Request Forgery
Kadence WooCommerce Email Designer <= 1.5.6 - PHP Object Injection
TH Advance Product Search <= 1.1.4 - Missing Authorization to Plugin Settings Change
TH Advance Product Search <= 1.1.4 - Missing Authorization to Plugin Settings Reset
Tabs <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Customer Reviews for WooCommerce <= 5.3.5 - Multiple Unprotected AJAX Actions
Customer Reviews for WooCommerce <= 5.3.5 - Cross-Site Request Forgery
Customer Reviews for WooCommerce <= 5.3.5 - Sensitive Data Exposure
Avada <= 7.8.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.