Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersSW Ajax WooCommerce Search <= 1.2.6 - Reflected Cross-Site Scripting
Greenmart <= 2.5.1 - Reflected Cross-Site Scripting
TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update
Live Chat – Live support <= 3.1.0 - Cross-Site Request Forgery
WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 - Cross-Site Request Forgery Bypass
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass
Discount Rules for WooCommerce <= 2.2.0 - Missing Authorization
Dokan <= 3.0.8 - Cross-Site Request Forgery Bypass
NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass
MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass
Discount Rules for WooCommerce <= 2.0.2 - Missing Authorization
NAB Transact < 2.1.2 - Payment System Bypass
Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorization
GreenMart – Organic & Food WooCommerce WordPress Theme < 2.4.3 - Reflected Cross-Site Scripting
Email Verification for WooCommerce <= 1.8.1 - Authentication Bypass
Jetapo | Jobboard WordPress Theme and Jetapo | Jobboard WordPress Theme with WooCommerce < 1.1 - Cross-Site Scripting
WooCommerce <= 4.2.0 - Reflected Cross-Site Scripting
YITH WooCommerce Ajax Product Filter <= 3.11.0 - Cross-Site Scripting
Newspaper <= 10.3.3 - Reflected Cross-Site Scripting
Login/Signup Popup < 1.5 - Missing Authorization
WooCommerce <= 4.0.4 - Unauthorized Post Meta Creation/Modification
Avada <= 6.2.2 - Authenticated (Contributor+) Cross-Site Scripting
Advanced Woo Search <= 2.00 - Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.