Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersCheckout Field Visibility for WooCommerce <= 1.3.0 - Unauthenticated Local File Inclusion
Booking and Rental Manager <= 2.3.6 - Missing Authorization
Coupon Affiliates – Affiliate Plugin for WooCommerce <= 6.3.0 - Reflected Cross-Site Scripting via 'commission_summary' Parameter
Booster Plus for WooCommerce <= 7.2.4 - Reflected Cross-Site Scripting
StoreContrl Woocommerce <= 4.1.3 - Unauthenticated Arbitrary File Download
Ultimate Store Kit Elementor Addons <= 2.4.0 - Unauthenticated PHP Object Injection
Vitepos <= 3.1.7 - Missing Authorization
Advanced Dynamic Pricing for WooCommerce <= 4.9.3 - Cross-Site Request Forgery to Settings Update
Booking and Rental Manager <= 2.2.8 - Missing Authorization
WooCommerce Product Table Lite <= 3.9.5 - Missing Authorization
WowStore <= 4.2.4 - Missing Authorization
Integration for WooCommerce and QuickBooks <= 1.3.1 - Cross-Site Request Forgery
WooCommerce Social Login <= 2.8.2 - Cross-Site Request Forgery
Conditional Shipping for WooCommerce <= 3.4.0 - Cross-Site Request Forgery
Conditional Payments for WooCommerce <= 3.3.0 - Cross-Site Request Forgery
Kadence WooCommerce Email Designer <= 1.5.14 - Authenticated (Admin+) Arbitrary File Upload
Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Information Disclosure
Eventin <= 4.0.25 - Authenticated (Contributor+) Local File Inclusion
Checkout Files Upload for WooCommerce <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure
Membership For WooCommerce <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bring Fraktguiden for WooCommerce <= 1.11.4 - Missing Authorization
Barcode Generator for WooCommerce <= 2.0.4 - Authenticated (Subscriber+) Arbitrary Content Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.