Medium
CVE-2022-46794
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2022-40700
CSSTidy - Server-Side Request Forgery
Medium
CVE-2022-38141
Sales Report Email for WooCommerce <= 2.8.0 - Missing Authorization for Email Functionality
Medium
CVE-2022-47449
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD <= 3.1.5 - Reflected Cross-Site Scripting via cart_search
High
CVE-2023-26525
Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection
Medium
CVE-2023-27447
WP SMS <= 6.0.4 - Information Disclosure via REST API
Medium
CVE-2023-0499
QuickSwish <= 1.0.9 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-0505
Ever Compare <= 1.2.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-0503
Free WooCommerce Theme 99fy Extension <= 1.2.7 - Cross-Site Request Forgery leading to Arbitrary Plugin Activation
Medium
CVE-2022-34344
Wholesale Suite <= 2.1.5 - Missing Authorization to Plugin Settings Change
Medium
CVE-2023-0865
WooCommerce Multiple Customer Addresses & Shipping <= 21.6 - Missing Authorization leading to Authenticated (Subscriber+) Arbitrary Address Creation/Deletion/View/Updates
Medium
CVE-2022-45070
Conditional Checkout Fields & Edit Checkout Fields for WooCommerce <= 1.2.3 - Missing Authorization
High
CVE-2022-45377
Drag and Drop Multiple File Upload for WooCommerce <= 1.0.8 - Cross-Site Request Forgery in upload and delete_file
Medium
CVE-2023-0942
Japanized For WooCommerce <= 2.5.4 - Reflected Cross-Site Scripting
High
CVE-2023-25986
PayGreen – Ancienne version <= 4.10.2 - Cross-Site Request Forgery
Medium
CVE-2022-40203
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Missing Authorization in ajaxCalculateSeveralProducts function
Medium
CVE-2022-40198
TeraWallet – For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via admin_options
Medium
CVE-2022-46805
Conditional Payments for WooCommerce <= 2.3.1 - Cross-Site Request Forgery
Medium
75f0bc5a-f588-4aeb-9e55-72e180d39ddf
ALD Dropping and Fulfillment for AliExpress and WooCommerce <= 1.0.21 - Missing Authorization to Order Information Disclosure
Medium
CVE-2022-46811
ALD Dropping and Fulfillment for AliExpress and WooCommerce <= 1.0.21 - Cross-Site Request Forgery to Order Information Disclosure
Medium
CVE-2022-46806
Cart All In One For WooCommerce <= 1.1.10 - Cross-Site Request Forgery to Cart Changes
Medium
CVE-2023-0068
Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4328
WooCommerce Checkout Field Manager <= 17.3 - Unauthenticated Arbitrary File Upload
Medium
413b2b38-44f2-4756-b66d-b6544c7ecaa2
Shoppable Images Lite <= 1.2.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.