Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filterseCommerce Product Catalog <= 3.6.0 - Authenticated (Custom Role+) PHP Object Injection
eCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute
eCommerce Product Catalog Plugin for WordPress <= 3.5.4 - Unauthenticated Stored Cross-Site Scripting
eCommerce Product Catalog Plugin for WordPress <= 3.5.5 - Unauthenticated SQL Injection
eCommerce Product Catalog <= 3.4.3 - Authenticated (Orders manager+) PHP Object Injection
eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset
eCommerce Product Catalog Plugin for WordPress <= 3.3.32 - Reflected Cross-Site Scripting
eCommerce Product Catalog <= 3.3.28 - Cross-Site Request Forgery
eCommerce Product Catalog <= 3.3.26 - Sensitive Information Exposure via CSV Files
eCommerce Product Catalog for WordPress <= 3.3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
eCommerce Product Catalog for WordPress <= 3.3.25 - Cross-Site Request Forgery
eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Vulnerability: eCommerce Product Catalog plugin for WordPress <= 3.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
eCommerce Product Catalog <= 3.0.71 - Reflected Cross-Site Scripting
eCommerce Product Catalog <= 3.0.71 - Reflected Cross-Site Scripting
eCommerce Product Catalog Plugin for WordPress <= 3.0.69 - Reflected Cross-Site Scripting
eCommerce Product Catalog Plugin for WordPress <= 3.0.70 - Reflected Cross-Site Scripting
eCommerce Product Catalog <= 3.0.38 Reflected Cross-Site Scripting
eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass
eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.