Medium
CVE-2026-1722
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2026-0845
WCFM - WooCommerce Frontend Manager <= 6.7.24 - Authenticated (Shop Manager+) Arbitrary Options Update
Medium
CVE-2025-15147
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.11.8 - Insecure Direct Object Reference to Update Membership Payment
Medium
CVE-2025-69386
RVCFDI para Woocommerce <= 8.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-69325
Primer MyData for Woocommerce <= 4.2.8 - Unauthenticated Path Traversal
Medium
CVE-2025-69381
WooCommerce Bulk Product Editor <= 3.0 - Missing Authorization
Medium
CVE-2025-69385
Cartify - WooCommerce Gutenberg WordPress <= 1.3 - Authenticated (Subscriber+) Arbitrary Post Deletion
High
CVE-2025-69328
Booking and Rental Manager <= 2.5.9 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-67994
YayCurrency <= 3.3 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2026-39608
iPOSpays Gateways WC <= 1.3.7 - Unauthenticated Missing Authorization to Settings Update via REST API Endpoint
Medium
CVE-2026-24962
Sigmize <= 0.0.9 - Cross-Site Request Forgery
Medium
CVE-2026-31919
Advanced Coupons for WooCommerce Coupons <= 4.7.1 - Missing Authorization
Medium
CVE-2026-31917
ERP <= 1.16.10 - Authenticated (Crm agent+) SQL Injection
Medium
CVE-2026-39607
Filter Plus <= 1.1.17 - Missing Authorization
Medium
CVE-2025-68025
Addonify Floating Cart For WooCommerce <= 1.2.17 - Missing Authorization
High
CVE-2025-69378
Product Filter for WooCommerce <= 9.1.2 - Authenticated (Shop Manager+) Privilege Escalation
High
CVE-2025-13192
Popup builder with Gamification <= 2.2.0 - Unauthenticated SQL Injection via Multiple REST API Endpoints
Medium
CVE-2025-68834
Sync Master Sheet – Product Sync with Google Sheet for WooCommerce <= 1.1.3 - Missing Authorization
Medium
CVE-2025-68024
Addonify – WooCommerce Wishlist <= 2.0.15 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2025-67982
Urna <= 2.5.12 - Unauthenticated Local File Inclusion
Medium
CVE-2025-68022
Plugin BlueX for WooCommerce <= 3.1.4 - Missing Authorization
Medium
CVE-2025-68023
Addonify – Compare Products For WooCommerce <= 1.1.17 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2025-67981
Besa <= 2.3.15 - Unauthenticated Local File Inclusion
High
CVE-2025-67980
Hara <= 1.2.17 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.