Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersEpeken All Kurir for Woocommerce <= 2.1.2 - Unauthenticated Payment Bypass
ShopEngine <= 4.9.2 - Cross-Site Request Forgery
Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Privilege Escalation
MultiParcels Shipping For WooCommerce <= 1.30.36 - Reflected Cross-Site Scripting
Gift Cards For WooCommerce Pro <= 4.2.9 - Unauthenticated Arbitrary File Upload
Appointment Booking Plugin for WooCommerce | Online Booking Calendar & Service Manager <= 1.3.2 - Authenticated (Customer+) Stored Cross-Site Scripting
E-cab Taxi Booking Manager for Woocommerce <= 2.0.3 - Missing Authorization
Colissimo shipping methods for WooCommerce <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting
WooCommerce Appointments <= 5.3.8 - Unauthenticated Information Exposure
TeraWallet - Wallet for WooCommerce <= 1.6.9 - Missing Authorization to Authenticated (Subscriber+) Wallet Balance Inflation
Local Delivery Drivers for WooCommerce <= 3.0.0 - Unauthenticated Stored Cross-Site Scripting
Cartify <= 1.3.0.1 - Missing Authorization
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Unauthenticated User Account Creation
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce <= 2.1.1 - Missing Authorization
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
SMEPay: UPI Gateway for WooCommerce <= 1.0.5 - Missing Authorization
Active Woot Products Tables for WooCommerce. 100% FREE <= 1.1.1 - Unauthenticated SQL Injection
Autopay / Blue Media for WooCommerce <= 5.0.0 - Unauthenticated Stored Cross-Site Scripting
AfterShip Tracking <= 1.18.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Product Input Fields for WooCommerce <= 2.0.1 - Unauthenticated Arbitrary File Upload
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.10 - Missing Authorization
Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) <= 1.0.7 - Missing Authorization
AI ChatBot for WooCommerce – WoowBot < 4.8.4 - Missing Authorization to Unauthenticated AI API Key Abuse
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.