Medium
CVE-2025-1303
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2024-13359
Product Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Upload
Medium
CVE-2025-1289
Plugin Oficial – Getnet para WooCommerce <= 1.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13640
Print Invoice & Delivery Notes for WooCommerce <= 5.4.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
High
CVE-2024-10804
Ultimate Video Player <= 10.0 - Unauthenticated Arbitrary File Download
Medium
CVE-2024-13904
Platform.ly for WooCommerce <= 1.1.6 - Unauthenticated Blind Server-Side Request Forgery
High
CVE-2024-13320
CURCY - WooCommerce Multi Currency - Currency Switcher <= 2.3.6 - Unauthenticated SQL Injection
Medium
CVE-2024-13810
Zass - WooCommerce Theme for Handmade Artists and Artisans <= 3.9.9.10 - Missing Authorization to Authenticated (Subscriber+) Demo Import
High
CVE-2025-0956
WooCommerce Recover Abandoned Cart <= 24.4.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-13811
Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import
Medium
CVE-2024-13747
WooMail - WooCommerce Email Customizer <= 3.0.34 - Authenticated (Subscriber+) Missing Authorization to SQL Injection
Medium
CVE-2024-13682
Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Cross-Site Request Forgery
Medium
CVE-2024-13724
Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Missing Authorization
Medium
CVE-2024-12812
WP ERP <= 1.13.3 - Authenticated (Employee+) Insecure Direct Object Reference
Medium
CVE-2024-12109
Product Labels For Woocommerce (Sale Badges) <= 1.5.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-10638
Product Labels For Woocommerce (Sale Badges) <= 1.5.10 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-26899
Recapture for WooCommerce <= 1.0.43 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-12808
WP ERP <= 1.13.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-26875
Multiple Shipping And Billing Address For Woocommerce <= 1.3 - Unauthenticated SQL Injection
High
CVE-2025-26988
SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Unauthenticated SQL Injection
Medium
CVE-2025-26553
Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin <= 2.2 - Reflected Cross-Site Scripting
High
CVE-2025-26535
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.6 - Unauthenticated SQL Injection
Medium
CVE-2024-9212
SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9217
Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.