Medium
CVE-2024-37217
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Critical
CVE-2024-6027
Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter
Critical
CVE-2024-5756
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin
Medium
CVE-2024-37120
Tabs <= 4.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37214
Ali2Woo Lite <= 3.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-37201
Woocommerce Customers Order History <= 5.2.2 - Missing Authorization
Medium
CVE-2024-1639
License Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information Exposure
Medium
CVE-2024-37211
Ali2Woo Lite <= 3.3.6 - Reflected Cross-Site Scripting
High
CVE-2024-5455
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37213
Ali2Woo Lite <= 3.4.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2024-37212
Ali2Woo Lite <= 3.4.4 - Cross-Site Request Forgery to PHP Object Injection
Medium
CVE-2024-37203
Laybuy Payment Extension for WooCommerce <= 5.3.9 - Missing Authorization
Medium
CVE-2024-37202
Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter <= 1.222.17 - Missing Authorization
Medium
CVE-2024-5768
MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2381
AliExpress Dropshipping with AliNext Lite <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-4450
AliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functions
Medium
CVE-2024-4632
WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-5871
WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injection
Medium
CVE-2024-5868
WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness
High
CVE-2024-6000
FooEvents for WooCommerce <= 1.19.20 - Improper Authorization to (Contributor+) Arbitrary File Upload
Critical
CVE-2024-4371
CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-5757
Elementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widget
Medium
CVE-2024-4564
CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2024-5530
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.