Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 115
Reset filtersTI WooCommerce Wishlist <= 2.10.0 - Unauthenticated HTML Injection
Premmerce Wishlist for WooCommerce <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist Deletion
ShopEngine <= 4.8.5 - Cross-Site Request Forgery to Wishlist Manipulation
QODE Wishlist for WooCommerce <= 1.2.7 - Unauthenticated Insecure Direct Object Reference to Wishlist Update
Wishlist for WooCommerce <= 1.1.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization
YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion
YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename
Wishlist and Save for later for Woocommerce <= 1.1.22 - Insecure Direct Object Reference to Authenticated (Subscriber+) Wishlist Item Deletion
Wisly <= 1.0.0 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
WPC Smart Wishlist for WooCommerce <= 5.0.4 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
WPC Smart Wishlist for WooCommerce <= 5.0.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization
Premmerce Wishlist for WooCommerce <= 1.1.10 - Unauthenticated Local File Inclusion
Wishlist for WooCommerce <= 3.2.3 - Missing Authorization
YITH WooCommerce Wishlist <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Wishlist <= 2.1.0 - Reflected Cross-Site Scripting
MC Woocommerce Wishlist <= 1.9.1 - Reflected Cross-Site Scripting
Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wishlist for WooCommerce <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wishlist <= 2.1.0 - Missing Authorization
Wishlist <= 2.1.0 - Authenticated (Subscriber+) Information Exposure
TI WooCommerce Wishlist <= 2.9.2 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.