Medium
CVE-2023-6892
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-32675
Order Limit for WooCommerce <= 2.0.0 - Missing Authorization
Medium
CVE-2024-32687
WPC Frequently Bought Together for WooCommerce <= 7.0.3 - Missing Authorization
Critical
CVE-2024-32680
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.5.2 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2024-32678
TrackShip for WooCommerce <= 1.7.5 - Missing Authorization
Medium
CVE-2023-6897
EAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode
Critical
CVE-2024-32602
WooCommerce Multilingual & Multicurrency with WPML <= 5.3.3.1 - Authenticated (Shop Manager+) SQL Injection
Medium
CVE-2024-32585
Import Content in WordPress & WooCommerce with Excel <= 4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-32556
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32516
Multi Currency For WooCommerce <= 1.5.5 - Missing Authorization
Critical
CVE-2024-2876
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection
Medium
CVE-2024-32524
Custom Order Statuses for WooCommerce <= 1.5.2 - Missing Authorization
Medium
CVE-2024-32513
Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More <= 13.3.1 - Sensitive Information Exposure via Log Files
Medium
CVE-2024-0629
2Checkout Payment Gateway for WooCommerce <= 6.2 - Missing Authorization via sniff_ins
Medium
CVE-2024-32520
WPC Grouped Product for WooCommerce <= 4.4.2 - Missing Authorization
Medium
CVE-2024-32517
Custom Thank You Page Customize For WooCommerce by Binary Carpenter <= 1.4.13 - Missing Authorization
Medium
CVE-2024-3243
Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Medium
CVE-2024-32522
Open Close WooCommerce Store <= 4.9.1 - Missing Authorization
Medium
CVE-2024-3869
Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search
Critical
CVE-2024-32511
Simple Registration for WooCommerce <= 1.5.6 - Unauthenticated Privilege Escalation
Medium
CVE-2024-32519
GG Woo Feed for WooCommerce Shopping Feed <= 1.2.6 - Missing Authorization
High
CVE-2024-3067
WooCommerce Google Feed Manager <= 2.4.2 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
Medium
CVE-2024-32436
Gift Vouchers <= 4.4.0 - Cross-Site Request Forgery
Medium
CVE-2024-32446
Wallet System for WooCommerce <= 2.5.9 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.