Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersWoocommerce Role Pricing <= 3.5.5 - Cross-Site Request Forgery
AdMail – Multilingual Back in-Stock Notifier for WooCommerce <= 1.7.0 - Missing Authorization
Ultimate Store Kit Elementor Addons <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Search, Filters & Merchandising for WooCommerce <= 3.0.58 - Authenticated (Contributor+) Stored Cross-Site Scripting
Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic <= 1.9 - Missing Authorization
Sequential Order Numbers for WooCommerce <= 3.6.2 - Cross-Site Request Forgery
Bookingor <= 2.0.1 - Missing Authorization
Ni WooCommerce Cost Of Goods <= 3.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Order Delivery Date for WooCommerce 2.0 - 12.3.1- Unauthenticated Arbitrary Options Update
QR Code Tag for WC order emails <= 1.9.36 - Cross-Site Request Forgery
Official CleverReach Plugin for WooCommerce <= 3.4.4 - Cross-Site Request Forgery to Settings Update
Fami WooCommerce Compare <= 1.0.5 - Unauthenticated Local File Inclusion
Advanced Woo Labels <= 2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting
Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload
Shopify to WooCommerce Migration <= 1.3.0 - Missing Authorization to Unauthenticated Settings Update
Free Woocommerce Product Table View <= 1.78 - Missing Authorization to Arbitrary Content Deletion
WR Price List Manager For Woocommerce <= 1.0.8 - Missing Authorization to Arbitrary Content Deletion
ShopCred <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gift Cards for WooCommerce <= 1.5.8 - Missing Authorization
Barcode Generator for WooCommerce <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
ShipDepot for WooCommerce <= 1.2.19 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.