Medium
CVE-2023-49777
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Low
CVE-2023-52144
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2023-52127
WPC Product Bundles for WooCommerce <= 7.3.1 - Cross-Site Request Forgery
Medium
CVE-2023-52124
WP Tabs <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-51494
WooCommerce Product Vendors <= 2.2.1 - Missing Authorization
Critical
CVE-2023-51423
WebinarIgnition <= 3.05.0 - Unauthenticated SQL Injection
Medium
CVE-2023-51512
Product Table by WBW <= 1.8.6 - Cross-Site Request Forgery via saveGroup
Critical
CVE-2023-51469
Checkout Mestres WP <= 7.1.9.6 - Unauthenticated SQL Injection
Medium
CVE-2023-51495
WooCommerce Warranty Requests <= 2.2.7 - Missing Authorization
Critical
CVE-2023-51505
Active Products Tables for WooCommerce <= 1.0.6 - Unauthenticated PHP Object Injection
Medium
CVE-2023-51678
Doofinder for WooCommerce <= 2.0.33 - Missing Authorization via multiple AJAX actions
High
CVE-2023-51422
WebinarIgnition <= 3.05.0 - Authenticated(Subscriber+) PHP Object Injection
High
CVE-2023-51481
Local Delivery Drivers for WooCommerce <= 1.9.0 - Missing Authorization to Driver Account Takeover
Medium
CVE-2023-51511
Booster Elite for WooCommerce <= 7.1.2 - Authenticated(Subscriber+) Content Injection
Medium
CVE-2023-51679
BulkGate SMS Plugin for WooCommerce <= 3.0.2 - Missing Authorization via Multiple AJAX Actions
Medium
CVE-2023-51499
WooCommerce Shipping Per Product <= 2.5.4 - Missing Authorization
Critical
CVE-2023-51471
Checkout Mestres WP <= 7.1.9.6 - Missing Authorization to Unauthenticated Arbitrary Options Update
Critical
CVE-2023-51472
Checkout Mestres WP <= 7.1.9.6 - Authentication Bypass via Password Reset
High
CVE-2023-51546
WooCommerce PDF Invoices <= 4.2.1 - Authenticated(Shop Manager+) Arbitrary Options Update via JSON Import
Medium
CVE-2023-51502
WooCommerce Stripe Payment Gateway <= 7.6.1 - Insecure Direct Object Reference via update_payment_intent_ajax
Medium
CVE-2023-51503
WooPayments – Fully Integrated Solution Built and Supported by Woo <= 6.6.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2023-51486
WooCommerce PDF Invoice Builder <= 1.2.101 - Cross-Site Request Forgery
Medium
CVE-2023-51497
WooCommerce Ship to Multiple Addresses <= 3.8.9 - Missing Authorization
Medium
CVE-2023-51498
WooCommerce Canada Post Shipping <= 2.8.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.