Medium
CVE-2023-48778
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2023-48768
Quantity Plus Minus Button for WooCommerce by CodeAstrology <= 1.1.9 - Cross-Site Request Forgery via wqpmb_form_submit
Medium
CVE-2023-48773
WooCommerce Login Redirect <= 2.2.4 - Cross-Site Request Forgery
Medium
CVE-2023-41671
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Missing Authorization via multiple AJAX functions
Medium
16a3469d-6264-4ed7-b6ae-fdd7a80c8ca5
Chronopost & Mondial relay pour WooCommerce - WCMultiShipping <= 2.3.7 - Incorrect Authorization
Critical
CVE-2023-40010
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.2 - Unauthenticated SQL Injection via search terms
High
CVE-2023-6090
Mollie Payments for WooCommerce <= 7.3.11 - Authenticated (Shop Manager+) Arbitrary File Upload
Medium
CVE-2023-48333
Booster for WooCommerce <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+) Order Information Disclosure
Medium
CVE-2023-48748
Salient Core <= 2.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-48749
Salient Core <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-48747
Booster for WooCommerce <= 7.1.2 - Missing Authorization to Product Creation/Modification
Medium
CVE-2023-4960
WCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-40334
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.2 - Missing Authorization via woof_meta_get_keys()
High
CVE-2023-48327
WC Vendors Marketplace <= 2.4.7 - Authenticated (Shop manager+) SQL Injection via search dates
High
CVE-2023-48742
License Manager for WooCommerce <= 2.2.10 - Authenticated (Administrator+) SQL Injection
Medium
dbf54852-f3fe-4c9e-9348-44a73f9a8131
WooCommerce Parcel Pro <= 1.6.11 - Cross-Site Request Forgery
Medium
CVE-2023-48275
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Low
52d1f9a3-243e-4e2c-a752-f40b6d275121
Abandoned Cart Lite for WooCommerce <= 5.16.0 - Improper Authorization via wcal_delete_expired_used_coupon_code
High
CVE-2023-5348
Product Catalog Mode For WooCommerce <= 5.0.2 - Unauthenticated Stored Cross-Site Scripting
Low
4edbfeee-b668-4a85-a030-c15d6583dc82
Abandoned Cart Lite for WooCommerce <= 5.16.0 - Improper Authorization via wcal_preview_emails
Medium
CVE-2023-48274
WCMultiShipping <= 2.3.5 - Missing Authorization to Log Export
Medium
CVE-2023-47847
PayTR Taksit Tablosu <= 1.3.1 - Missing Authorization
Medium
c6e2710f-f51a-487d-a4bb-a19f614ff254
Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via manual review reminders
Medium
b243722e-6510-48bd-be26-95ccbe79fa57
Customer Reviews for WooCommerce <= 5.38.1 - Cross-Site Request Forgery via manual review reminders
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.