Medium
CVE-2024-24711
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2024-24703
MultiVendorX Marketplace <= 4.0.25 - Missing Authorization
Medium
CVE-2024-0797
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Missing Authorization
Medium
ab2a4903-2c69-48da-bd4a-79b39b78806c
Custom Order Status for WooCommerce <= 2.3.0 - Cross-Site Request Forgery
Medium
4fc76e1c-546f-4ecd-bd3b-a6f21b2c65bf
BizPrint <= 4.5.1 - Missing Authorization in showTemplatePreview
Medium
487a131e-4911-42d6-bfd7-fc697c89552d
BizPrint <= 4.5.1 - Cross-Site Request Forgery in Printer Management
Critical
CVE-2024-23512
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks <= 3.1.4 - PHP Object Injection via wopb_wishlist and wopb_compare
Medium
CVE-2024-0678
Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-0617
Category Discount Woocommerce <= 4.11 - Cross-Site Request Forgery via wpcd_save_discount()
High
CVE-2024-0566
Smart Manager - WooCommerce Advanced Bulk Edit, Inventory Management & more... <= 8.27.0 - Authenticated (Admin+) SQL Injection
Critical
CVE-2024-0705
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection
Medium
CVE-2023-50850
WooCommerce Subscriptions < 5.8.0 - Missing Authorization
Medium
CVE-2024-0586
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping
Medium
CVE-2024-0585
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl
Medium
CVE-2024-22153
Stock Locations for WooCommerce <= 2.5.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
High
CVE-2024-22152
Product Import Export for WooCommerce <= 2.3.7 - Authenticated(Shop Manager+) Arbitrary File Upload via upload_import_file
Medium
CVE-2023-7151
Product Enquiry for WooCommerce <= 3.1 - Reflected Cross-Site Scripting
Medium
c9141ad3-86cf-47ae-be99-d78f0337f2ca
WP SMS <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-22147
PDF Invoices & Packing Slips for WooCommerce <= 3.7.6 - Authenticated (Shop Manager+) SQL Injection
Medium
CVE-2024-0251
Advanced Woo Search <= 2.96 - Reflected Cross-Site Scripting
Medium
43810a17-89b4-44f5-887e-1ad0989ea5b4
WooCommerce < 8.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-31276
Products & Order Export for WooCommerce <= 2.0.7 - Missing Authorization
Medium
5344499d-c183-4164-a52c-0dca7873f63d
Woocommerce Vietnam Checkout <= 2.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-22135
Order Export & Order Import for WooCommerce <= 2.4.3 - Authenticated (Shop Manager+) Arbitrary File Upload via upload_import_file
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.