Medium
CVE-2024-3609
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-34763
Builder for WooCommerce reviews shortcodes – ReviewShort <= 1.01.5 - Missing Authorization
Medium
CVE-2024-4634
Elementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-34751
Order Export & Order Import for WooCommerce <= 2.4.9 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2024-4749
WP eMember <= 10.3.8 - Reflected Cross-Site Scripting via 'fieldId'
Medium
CVE-2024-0870
YITH WooCommerce Gift Cards <= 4.12.0 - Missing Authorization to Unauthenticated WooCommerce Settings Update
Medium
CVE-2024-4624
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34811
WP SMS <= 6.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-35167
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35173
Serial Numbers for WooCommerce – License Manager <= 2.1.0 - Missing Authorization
Medium
CVE-2024-4039
Orders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-4448
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'
Medium
CVE-2024-4275
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'
Medium
CVE-2024-4449
Essential Addons for Elementor <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets
Medium
CVE-2024-34812
ShopBuilder – Elementor WooCommerce Builder Addons <= 2.1.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-34813
MC Woocommerce Wishlist <= 1.7.8 - Missing Authorization
Medium
CVE-2024-34819
MC Woocommerce Wishlist <= 1.7.2 - Missing Authorization
Medium
CVE-2024-4038
Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro <= 5.3.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-4339
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-4606
Ultimate Store Kit Elementor Addons <= 2.0.3 - Unauthenticated PHP Object Injection
Critical
CVE-2024-34412
Shipment Tracking, Tracking, and Order Tracking for WooCommerce – ParcelPanel (Free to install) <= 3.8.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-6327
ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products
High
CVE-2024-34370
EAN for WooCommerce <= 4.8.9 - Authenticated (Shop Manager+) Arbitrary Options Update
Medium
CVE-2024-3991
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.