Medium
CVE-2025-47643
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2025-47540
weMail <= 1.14.13 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-4335
Woocommerce Multiple Addresses <= 1.0.7.1 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-39364
Product Category Slider for WooCommerce <= 4.3.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-46486
Nomupay Payment Processing Gateway <= 7.1.7 - Authenticated (Shop Manager+) Arbitrary File Download
High
CVE-2025-4204
Ultimate Auction Pro <= 1.5.2 - Unauthenticated SQL Injection via 'auction_id'
Medium
CVE-2025-3438
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalation
High
CVE-2024-13344
Advance Seat Reservation Management for WooCommerce <= 3.3 - Unauthenticated SQL Injection
Medium
CVE-2025-2168
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Update
Medium
CVE-2025-43838
Custom PC Builder Lite for WooCommerce <= 1.0.1 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2025-3906
Integração entre Eduzz e Woocommerce 1.5.0 - 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-3775
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter
Medium
CVE-2025-3743
Upsell Funnel Builder for WooCommerce <= 3.0.0 - Unauthenticated Order Manipulation
Medium
CVE-2025-46489
Bulk Assign Linked Products For WooCommerce <= 2.1 - Missing Authorization
Medium
CVE-2025-3280
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-1284
Woocommerce Automatic Order Printing | ( Formerly WooCommerce Google Cloud Print) <= 4.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order Information Disclosure
Medium
CVE-2025-46243
Recover abandoned cart for WooCommerce <= 2.2 - Cross-Site Request Forgery
Medium
CVE-2025-46244
Advanced Linked Variations for Woocommerce <= 1.0.3 - Missing Authorization
Medium
CVE-2025-64196
Booster for WooCommerce <= 7.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-64285
Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Missing Authorization
Medium
CVE-2025-3814
Tax Switch for WooCommerce <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via class-name Parameter
Critical
CVE-2025-39349
CiyaShop <= 4.18.0 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39378
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Local File Inclusion
Medium
CVE-2025-3472
Ocean Extra <= 2.4.6 - Unauthenticated Arbitrary Shortcode Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.