Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersGiftXtore <= 1.7.5 - Unauthenticated Local File Inclusion
Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Unauthenticated Local File Inclusion
CraftXtore <= 1.7 - Unauthenticated Local File Inclusion
Petito <= 1.6.4 - Unauthenticated Local File Inclusion
Stock Locations for WooCommerce <= 2.8.6 - Missing Authorization
WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
Min Max Step Quantity Limits Manager for WooCommerce <= 5.1.0 - Cross-Site Request Forgery
Product Feed for WooCommerce <= 2.2.8 - Missing Authorization
WC Vendors Marketplace <= 2.5.6 - Authenticated (Administrator+) SQL Injection
All Currencies for WooCommerce <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
FraudLabs Pro for WooCommerce <= 2.22.11 - Missing Authorization
BRW <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Persian Woocommerce SMS <= 7.0.10 - Authenticated (Shop manager+) SQL Injection
Print Invoice & Delivery Notes for WooCommerce <= 5.5.0 - Cross-Site Request Forgery
TicketBAI Facturas para WooCommerce <= 3.21 - Missing Authorization
Direct Checkout for WooCommerce Lite <= 1.0.3 - Missing Authorization
BRW <= 1.8.6 - Authenticated (Contributor+) Local File Inclusion
Payment QR WooCommerce <= 1.1.6 - Missing Authorization
MC Woocommerce Wishlist <= 1.9.1 - Reflected Cross-Site Scripting
MultiVendorX <= 4.2.22 - Unauthenticated Information Exposure
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.