Medium
CVE-2023-33332
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
57156ebc-2858-4295-ba08-57bcab6db229
WooCommerce Shipping & Tax <= 2.2.4 - Stored Cross-Site Scripting
Medium
e743e656-2dd9-43ed-a190-b03af7c75c54
Abandoned Cart Lite for WooCommerce <= 5.14.1 - Cross-Site Request Forgery via ts_reset_tracking_setting
Medium
CVE-2023-33314
BEAR <= 1.1.3.1 - Cross-Site Request Forgery via Multiple Functions
Medium
a1e51a99-f5d4-47d4-bead-00ca1f5f72c2
Abandoned Cart Lite for WooCommerce <= 5.14.1 - Cross-Site Request Forgery via delete_expired_used_coupon_code
Critical
CVE-2023-33318
WooCommerce Follow-Up Emails <= 4.9.40 - Authenticated Arbitrary File Upload in Template Editing
Medium
CVE-2023-33316
WooCommerce Follow-Up Emails <= 4.9.40 - Cross-Site Request Forgery
Medium
CVE-2023-33319
WooCommerce Follow-Up Emails <= 4.9.40 - Reflected Cross-Site Scripting
High
CVE-2023-33317
WooCommerce Warranty Requests <= 2.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-33216
WooDiscuz – WooCommerce Comments <= 2.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32962
WishSuite <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32963
WooCommerce Predictive Search <= 5.8.0 - Cross-Site Request Forgery via multiple AJAX actions
High
CVE-2023-2706
OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation
High
CVE-2023-32795
WooCommerce Product Add-ons <= 6.1.3 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2023-32793
WooCommerce Pre-Orders <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-32802
WooCommerce Pre-Orders <= 1.9.0 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-32794
WooCommerce Product Add-ons <= 6.1.3 - Cross-Site Request Forgery
Medium
CVE-2023-32746
WooCommerce Brands <= 1.6.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-32744
WooCommerce Product Recommendations < 2.3.0 - Cross-Site Request Forgery
Medium
CVE-2023-32747
WooCommerce Bookings <= 1.15.78 - Insecure Direct Object Reference
Medium
CVE-2023-32801
WooCommerce Composite Products <= 8.7.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-32799
WooCommerce Ship to Multiple Addresses <= 3.8.3 - Insecure Direct Object Reference
Medium
CVE-2023-32742
WP SMS <= 6.1.4 - Reflected Cross-Site Scripting via 'delete_mobile'
Medium
CVE-2023-32575
Product page shipping calculator for WooCommerce <= 1.3.25 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.