Medium
CVE-2023-4937
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2023-4940
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Medium
CVE-2023-4943
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Medium
CVE-2023-4942
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Medium
CVE-2023-44149
Brands for WooCommerce <= 3.8.2.2 - Missing Authorization to Unauthenticated Order Manipulation and Information Retrieval
Medium
996dc1d7-12f8-467d-bf48-a7a82f1c0a41
Brands for WooCommerce <= 3.8.2.2 - Cross-Site Request Forgery
High
CVE-2023-4821
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-4423
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-44144
Payment gateway per Product for WooCommerce <= 3.2.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-4948
WooCommerce CVR Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) CVR Update
Medium
CVE-2023-4796
Booster for WooCommerce <= 7.1.0 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Medium
CVE-2023-4945
Booster for WooCommerce <= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4947
WooCommerce EAN Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) EAN Update
High
d6cbec61-cbe8-44a6-8cc8-8603393ed6b0
WooCommerce Beta Tester < 2.2.4 - Authenticated (Administrator+) SQL Injection
High
afd9046c-5b6a-411e-8e66-ff1ba60d7f9d
MultiVendorX <= 4.0.25 - Improper Authorization on REST Routes via 'save_settings_permission'
Medium
f1efcff5-3af6-4c44-9654-b917523419aa
WooCommerce <= 7.0.0 - Authenticated(Shop Manager+) Sensitive Information Exposure
Medium
ad430706-749f-4582-af07-6c543b8d5aad
Checkout Field Editor <= 1.7.4 - Cross-Site Request Forgery to Checkout Fields Update
Medium
a4647210-ba7e-4233-83d6-12572213f5fb
Checkout Field Editor (Premium) < 1.7.5 - Cross-Site Request Forgery
Medium
CVE-2023-7320
WooCommerce <= 7.8.2 - Sensitive Information Exposure
Medium
08a98c08-cddc-4bc3-bc07-15d084070abd
WooCommerce Subscription < 4.6.0 - Cross-Site Request Forgery
Medium
CVE-2023-41803
BitPay Checkout for WooCommerce <= 4.1.0 - Missing Authorization
Medium
CVE-2023-41691
WooCommerce PensoPay <= 6.3.1 - Reflected Cross-Site Scripting via 'pensopay_action'
High
CVE-2023-41685
Woocommerce Support System <= 1.2.1 - Authenticated (Administrator+) SQL Injection via 'orderby'
Medium
CVE-2023-41693
MyCryptoCheckout <= 2.125 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.