Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersCoinPayments.net Payment Gateway for WooCommerce <= 1.0.17 - Unauthenticated PHP Object Injection
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.8 - Authenticated (Shop manager+) SQL Injection
Open Close WooCommerce Store <= 4.9.5 - Authenticated (Contributor+) Local File Inclusion
Challan <= 3.7.58 - Cross-Site Request Forgery to Arbitrary Options Update
TrackShip for WooCommerce <= 1.9.1 - Authenticated (Shop manager+) SQL Injection
Multiple Plugins by wpcodefactory <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
PDF Invoices for WooCommerce + Drag and Drop Template Builder <= 5.3.8 - Authenticated (Administrator+) SQL Injection
Calculate Prices based on Distance For WooCommerce <= 1.3.5 - Missing Authorization
Integration for WooCommerce and Salesforce <= 1.7.5 - Open Redirect
PW WooCommerce Bulk Edit <= 2.134 - Cross-Site Request Forgery
Awin – Advertiser Tracking for WooCommerce <= 2.0.0 - Cross-Site Request Forgery
Wolmart | Multi-Vendor Marketplace WooCommerce Theme <= 1.8.11 - Unauthenticated Arbitrary Shortcode Execution in wolmart_loadmore
Cart tracking for WooCommerce <= 1.0.17 - Authenticated (Administrator+) SQL Injection
Pays – WooCommerce Payment Gateway <= 2.6 - Cross-Site Request Forgery
워드프레스 결제 심플페이 <= 5.2.11 - Cross-Site Request Forgery
Cozy Blocks <= 2.1.22 - Missing Authorization
Music Player for WooCommerce <= 1.5.1 - Missing Authorization
Eventin <= 4.0.26 - Missing Authorization to Unauthenticated Privilege Escalation
GS Variation Swatches for WooCommerce <= 3.0.4 - Missing Authorization
Product Time Countdown for WooCommerce <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mail Mint <= 1.17.7 - Unauthenticated Sensitive Information Exposure
theMarketer <= 1.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.