Medium
CVE-2023-47509
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2023-5325
Woocommerce Vietnam Checkout <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-47181
Email Templates <= 1.4.2 - Cross-Site Request Forgery via send_test_email
Medium
e881ba2f-0e88-4c7b-aa0d-84e816019db9
Product Catalog Mode For Woocommerce <= 5.0.2 - Missing Authorization
Medium
CVE-2023-5703
Gift Up Gift Cards for WordPress and WooCommerce <= 2.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-50899
Product Catalog Enquiry <= 5.0.2 - Missing Authorization
Medium
CVE-2023-48284
Decorator - WooCommerce Email Customizer <= 1.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-47186
Kadence WooCommerce Email Designer <= 1.5.11 - Cross-Site Request Forgery
High
CVE-2023-47179
WooODT Lite <= 2.4.6 - Missing Authorization to Arbitrary Options Update
High
CVE-2023-47180
Finale Lite <= 2.16.0 - Missing Authorization to Content Deletion
Medium
CVE-2023-5234
Related Products for WooCommerce <= 3.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-46822
WooCommerce - Store Exporter <= 2.7.2 - Reflected Cross-Site Scripting via 'filter'
Medium
CVE-2023-46783
Pre-Orders for WooCommerce <= 1.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-46634
Custom My Account for Woocommerce <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-46631
Product Recommendation Quiz for eCommerce <= 2.1.0 - Missing Authorization in prq_set_token
Medium
CVE-2023-46635
YITH WooCommerce Product Add-Ons <= 4.2.0 - Missing Authorization
Medium
CVE-2023-32299
Ni WooCommerce Sales Report <= 3.7.3 - Missing Authorization via ajax_sales_order
Medium
CVE-2023-46629
Remove Add to Cart WooCommerce <= 1.4.4 - Cross-Site Request Forgery to Settings Modification
High
CVE-2023-2841
Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-5132
Soisy Pagamento Rateale <= 6.0.1 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-5638
Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44999
Stripe Gateway <= 7.6.0 - Cross-Site Request Forgery
Medium
CVE-2023-46094
Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-46076
WooCommerce PDF Invoice Builder <= 1.2.103 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.