Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersWooCommerce Multi Currency <= 2.1.17 - Missing Authorization
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
Avada <= 7.4.1 - Stored Cross-Site Scripting
Avada <= 7.4.1 - Reflected Cross-Site Scripting
Integration of Moneybird for WooCommerce <= 2.1.2 - Reflected Cross-Site Scripting
WooCommerce Payment Gateway Per Category <= 2.0.10 - Reflected Cross-Site Scripting
Multiple XforWooCommerce Add-On Plugins (Various Versions) - Missing Authorization
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop <= 1.6.0 - Reflected Cross-Site Scripting
ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.2.3 - Reflected Cross-Site Scripting
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Stored Cross-Site Scripting
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Unauthenticated Settings Import/Export
CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
PHPRelativePath Library - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
Booster for WooCommerce <= 5.4.3 - Authentication Bypass
WooCommerce Affiliate Plugin – Coupon Affiliates <= 4.11.0.1 - Reflected Cross-Site Scripting
Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More < 3.3.1.0 - Authenticated SQL Injection via product_id Parameter
WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypass
Afterpay Gateway for WooCommerce <= 3.2.0 - Reflected Cross-Site Scripting
Moova for WooCommerce <= 3.5 - Reflected Cross-Site Scripting
MWB Point of Sale (POS) for WooCommerce <= 1.0.0 - Missing Authorization
Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting
SMS Alert Order Notifications – WooCommerce <= 3.4.6 - Cross-Site Scripting
WP SMS <= 5.4.12 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.