Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersAppy Pie Connect for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password
WooCommerce Vehicle Parts Finder <= 3.7 - Unauthenticated PHP Object Injection
WooCommerce Vehicle Parts Finder <= 3.7 - Unauthenticated Stored Cross-Site Scripting
Big Post Shipping for WooCommerce <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
TheGem (Elementor) <= 5.10.5 - Missing Authorization
YayCurrency <= 3.2 - Authenticated (Administrator+) Remote Code Execution
GST for WooCommerce <= 2.0 - Cross-Site Request Forgery
Smart Related Products <= 2.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Nota Fiscal Eletrônica WooCommerce <= 3.4.0.9 - Missing Authorization
EmailKit <= 1.6.0 - Missing Authorization to Authenticated (Author+) Arbitrary Content Deletion
Nota Fiscal Eletrônica WooCommerce <= 3.4.0.9 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Conditional Cart Messages for WooCommerce – YourPlugins.com <= 1.2.10 - Cross-Site Request Forgery
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.3 - Insufficient Authorization to Authenticated (Editor+) Settings Update
MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler'
The Plus Addons for Elementor <= 6.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Epeken All Kurir <= 2.1.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting
AppMySite <= 3.15.0 - Missing Authorization
Ongkoskirim.id <= 1.0.6 - Missing Authorization
Helpdesk Support Ticket System for WooCommerce <= 2.1.1 - Missing Authorization
Deliver via Shipos for WooCommerce <= 3.0.2 - Cross-Site Request Forgery
TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization
Envíos Coordinadora Woocommerce <= 1.1.31 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.