Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersWordPress Comments Import & Export <= 2.0.4 - CSV Injection
Advanced Order Export For WooCommerce <= 1.5.4 - CSV Injection
Digital Goods < 2.2 - Cross-Site Request Forgery
Advance Search for WooCommerce < 1.1 - Cross-Site Scripting
Advance Search for WooCommerce <= 1.0.9 - Cross-Site Scripting
Woocommerce Category Banner Management <= 1.1.0 - Missing Authorization
WOOF - Products Filter for WooCommerce <= 1.1.9 - Remote Code Execution
WOOF - Products Filter for WooCommerce <= 1.1.9 - Local File Inclusion
YITH WooCommerce Wishlist <= 2.1.2 - SQL Injection
Woocommerce CSV importer <= 3.3.6 - Arbitrary File Deletion
SagePay Server Gateway for WooCommerce < 1.0.9 - Cross-Site Scripting
WooCommerce <= 3.2.3 - Authenticated PHP Object Injection
WooCommerce PDF Invoices & Packing Slips <= 2.0.12 - Cross-Site Scripting
FG PrestaShop to WooCommerce Plugin <= 3.19.1 - Cross-Site Scripting
Product Vendors <= 2.0.35 - Reflected Cross Site Scripting
Avada <= 5.1.4 - Cross-Site Request Forgery
Avada <= 5.1.4 - Stored Cross-Site Scripting
WC Catalog Enquiry <= 3.0.5 - Arbitrary File Upload
Direct Download for Woocommerce < 1.16 - Local File Inclusion
WooCommerce Email Test <= 1.5 - Sensitive Data Exposure
WooCommerce <= 2.6.8 - Authenticated Stored Cross-Site Scripting
YITH WooCommerce Compare <= 2.0.9 - Unauthenticated PHP Object Injection
PPOM for WooCommerce <= 1.1 - Arbitrary File Upload
A vulnerability in the PPOM for WooCommerce plugin allows unauthenticated attackers to upload arbitrary files due to missing file type validation, potentially leading to remote code execution.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.