High
CVE-2025-69294
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2026-24992
Advanced WooCommerce Product Sales Reporting <= 4.1.2 - Unauthenticated Information Exposure
High
CVE-2025-69322
PeakShops < 1.5.9 - Unauthenticated Local File Inclusion
High
CVE-2025-68047
Eventin <= 4.1.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-24562
Ryviu – Product Reviews for WooCommerce <= 3.1.26 - Missing Authorization
Medium
CVE-2025-68881
AppExperts <= 1.4.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-24553
Fraud Prevention For Woocommerce <= 2.3.2 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-67958
TaxCloud for WooCommerce <= 8.3.8 - Missing Authorization
Medium
CVE-2026-0554
NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset
High
CVE-2025-15380
NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'
High
CVE-2025-67945
MailerLite – WooCommerce integration <= 3.1.2 - Unauthenticated SQL Injection
Medium
CVE-2025-12573
Bookingor <= 1.0.12 - Missing Authorization
Medium
CVE-2025-14348
weMail <= 2.0.7 - Insufficient Authorization via x-wemail-user Header to Sensitive Information Disclosure
High
CVE-2025-14977
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 4.2.4 - Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disclosure
Medium
CVE-2025-14978
PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) <= 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification
Medium
CVE-2025-68018
Order Listener for WooCommerce <= 3.6.1 - Missing Authorization
Medium
CVE-2026-24583
SumUp Payment Gateway For WooCommerce <= 2.7.9 - Missing Authorization
Medium
CVE-2026-24581
Points and Rewards for WooCommerce <= 2.9.5 - Missing Authorization
Medium
CVE-2026-24585
Hyyan WooCommerce Polylang Integration <= 1.5.0 - Missing Authorization
Medium
CVE-2025-14078
PAYGENT for WooCommerce <= 2.4.6 - Missing Authorization to Unauthenticated Payment Callback Manipulation
Medium
CVE-2025-14450
Wallet System for WooCommerce <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation
Medium
CVE-2025-68016
onepay Payment Gateway For WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Order Status Modification
Critical
CVE-2025-10484
Registration & Login with Mobile Phone Number for WooCommerce <= 1.3.1 - Authentication Bypass
Medium
CVE-2026-1004
Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.