High
CVE-2024-1308
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-0881
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel <= 2.2.74 - Information Exposure
Medium
CVE-2024-2384
WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure
Medium
CVE-2024-1325
Live Sales Notification for Woocommerce – Woomotiv <= 3.4.3 - Cross-Site Request Forgery via ajax_cancel_review
High
CVE-2024-1205
Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring <= 1.2.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-1119
Order Tip for WooCommerce <= 1.3.1 - Missing Authorization to Unauthenticated Data Export
Medium
CVE-2024-2387
Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms <= 1.82.0 - SQL Injection to Reflected Cross-Site Scripting via integration_id
High
CVE-2024-29135
Tourfic <= 2.11.15 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-2580
Automation By Autonami <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-29136
Tourfic <= 2.11.17 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-29121
WooCommerce License Manager <= 5.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-29112
WooCommerce Google Feed Manager <= 2.2.0 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2024-29116
WooThumbs for WooCommerce by Iconic <= 5.5.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-29125
Coupon Affiliates <= 5.12.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-27994
YITH WooCommerce Product Add-Ons <= 4.5.0 - Unuathenticated Cross-Site Scripting
Medium
CVE-2024-29093
Builder for WooCommerce reviews shortcodes – ReviewShort <= 1.01.3 - Cross-Site Request Forgery
Medium
CVE-2024-1857
Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates <= 2.6.6 - Missing Authorization to Unauthenticated Information Exposure
High
CVE-2024-1795
HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-1796
HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1960
ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link
Medium
CVE-2024-27959
APIExperts Square for WooCommerce <= 4.2.9 - Reflected Cross-Site Scripting
Critical
CVE-2024-27971
Premmerce Permalink Manager for WooCommerce <= 2.3.10 - Unauthenticated Local File Inclusion
Medium
CVE-2024-27965
WPFunnels <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-2322
WooCommerce Cart Abandonment Recovery <= 1.2.26 - Cross-Site Request Forgery to Templates/Abandoned Orders Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.