Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersWP Event Manager <= 3.1.22 - Admin+ Stored Cross-Site Scripting
NotificationX <= 2.3.8 - Blind SQL Injection
Custom Content Shortcode <= 3.8.8 - Unauthorised Arbitrary Post Metadata Access
Product Feed PRO for WooCommerce <= 11.2.1 - Reflected Cross-Site Scripting
Conversios.io - Google Analytics and Google Shopping plugin for WooCommerce <= 4.6.1 Authenticated SQL Injection
TI WooCommerce Wishlist / TI WooCommerce Wishlist Pro < 1.40.1 - Unauthenticated SQL Injection
Perfect Brands for WooCommerce <= 2.0.4 - Server Information Disclosure
Perfect Brands for WooCommerce <= 2.0.4 - Unauthorized Brand Creation
WOOCS <= 1.3.7.4 - Reflected Cross-Site Scripting via AJAX action
PPOM for WooCommerce <= 23.9 - Missing Authorization to Stored Cross-Site Scripting
Side Cart Woocommerce (Ajax) <= 2.0 - Cross-Site Request Forgery to Arbitrary Options Update
WooCommerce – Store Exporter <= 2.7 - Reflected Cross-Site Scripting
Store Toolkit for WooCommerce <= 2.3.1 - Reflected Cross-Site Scripting
Rearrange Woocommerce Products <= 3.0.7 - Subscriber+ SQL Injection
TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Blog Option Update
TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Settings Update
WOOF - Products Filter for WooCommerce <= 1.2.6.2 - Reflected Cross-Site Scripting
Orders Tracking for WooCommerce <= 1.0.14 - Reflected Cross-Site Scripting
Product Feed PRO for WooCommerce <= 11.0.6 - Settings Update to Stored Cross-Site Scripting
Responsive Tabs with WooCommerce Product Tab Extension <= 3.5.4 - Unauthenticated Arbitrary Option Update
WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting
WOOCS <= 1.3.7.2 - Reflected Cross-Site Scripting
WooCommerce EnvioPack <= 1.2 Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.