Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersAdmin and Customer Messages After Order for WooCommerce: OrderConvo <= 13.5 - Unauthenticated Arbitrary File Read
Email Template Customizer for WooCommerce <= 1.2.17 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Ultimate Addons for Elementor Lite <= 2.4.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
WooCommerce Fortnox Integration <= 4.5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Woocommerce Envato Affiliates <= 1.2.1 - Reflected Cross-Site Scripting
PagBank / PagSeguro Connect para WooCommerce <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter
WooCommerce Booking Bundle Hours <= 0.7.4 - Cross-Site Request Forgery
ShopLentor <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Additional Custom Product Tabs for WooCommerce <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Woocommerce Customizer <= 1.0.2 - Reflected Cross-Site Scripting
License Manager for WooCommerce <= 3.0.12 - Authenticated (Administrator+) SQL Injection
Custom WooCommerce Checkout Fields Editor <= 1.3.4 - Cross-Site Request Forgery
WooCommerce Single Page Checkout <= 1.2.7 - Cross-Site Request Forgery
Woocommerce Notify Updated Product <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
TrustMate.io – WooCommerce integration <= 1.17.0 - Cross-Site Request Forgery
Woocommerce Gifts Product <= 1.0.0 - Cross-Site Request Forgery
ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.4.3 - Authenticated (Admin+) SQL Inejction
Monki <= 2.0.5 - Unauthenticated Local File Inclusion
PeachPay Payments <= 1.117.4 - Missing Authorization
Order Delivery Date for WooCommerce <= 4.1.0 - Missing Authorization
TheGem (Elementor) <= 5.10.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Klarna Order Management for WooCommerce <= 1.9.8 - Authenticated (Shop Manager+) Information Disclosure via Log Files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.