Critical
CVE-2021-4347
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2021-24566
WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion
High
CVE-2021-32790
WooCommerce < 5.5 - Authenticated Blind SQL Injection
High
47ccda70-8c89-4e0f-a7fa-5b80515e60dc
WOWRestro – Online Ordering System For WooCommerce < 1.1 - Cross-Site Request Forgery
High
75e5e1eb-300f-4ddf-aec5-4fae9dba0f5d
Unlimited Category slider for WooCommerce <= 2.0.0 - Cross-Site Request Forgery
High
53409aeb-67a6-4a44-993a-fb23f8fb1344
WooCommerce Extra Cost <= 2.6 - Cross-Site Request Forgery
Medium
CVE-2021-4395
Abandoned Cart Recovery for WooCommerce <= 1.0.4 - Cross-Site Request Forgery Bypass
High
3d0a709e-1514-43dd-8719-e9bdfdc610d2
NMI Gateway For WooCommerce <= 1.6.11 - Cross-Site Request Forgery
High
CVE-2021-32789
WooCommerce Blocks < 5.5 - Authenticated Blind SQL Injection
Medium
b597e8a5-043e-440e-aaa2-38fb3eeb0731
WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc <= 5.4.9 - Reflected Cross-Site Scripting
High
a7f82847-433d-49b1-815d-b0d9e70068c2
Instantio – WooCommerce Quick Checkout | Instant Checkout, Side Cart & Popup Cart <= 1.2.5 - Cross Site Request Forgery
High
8459c436-0c4d-40e6-a30d-94b8ac50df83
WooCommerce Custom Registration Form <= 1.0.4 - Cross-Site Request Forgery
High
6c3032ae-eb86-47d0-b160-320a67a380e1
WooCommerce Reviews Plugin with Multi-criteria Rating by ReviewX < 1.2.9 - Cross-Site Request Forgery
High
391e12f7-9521-4ac6-bd78-ac28df72030b
BNG Gateway For WooCommerce <= 1.6.10 - Cross-Site Request Forgery
High
190edd82-840d-4468-8f5a-127cce049336
YITH Request a Quote for WooCommerce <= 1.6.3 - Cross-Site Request Forgery
High
12849d7e-1685-4e03-be0c-0672545fcd2b
Express Shop <= 4.0.2 - Cross-Site Request Forgery
High
00f5812d-661e-4206-8c3d-127bc3d48961
Woocommerce Tabs Plugin, Add Custom Product Tabs <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2021-4391
Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypass
High
CVE-2021-34619
WooCommerce Stock Manager <= 2.5.7 - Cross-Site Request Forgery to Arbitrary File Upload
Critical
CVE-2021-24375
Motor – Cars, Parts, Service, Equipments and Accessories WooCommerce Store < 3.1.0 - Local File Inclusion
Medium
CVE-2021-24432
Advanced AJAX Product Filters <= 1.5.4.6 - Reflected Cross-Site Scripting
Medium
bb545a42-6c66-412b-a686-e486b0a58dc5
Stripe Payment Plugin for WooCommerce <= 3.5.9 - Reflected Cross-Site Scripting
Medium
24f13f9a-b240-4e32-9f12-117dbe7ecac4
Multivendor Marketplace Solution for WooCommerce <= 3.7.3 - Insecure Direct Object Reference
Medium
CVE-2021-24330
Funnel Builder by CartFlows <= 1.6.12 - Authenticated Stored Cross-Site scripting via FB Pixel ID and Google Analytics ID
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.