Medium
CVE-2024-54235
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-54236
Ni WooCommerce Bulk Product Editor <= 1.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-54231
Ni WooCommerce Order Export <= 3.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-54227
Minimum and Maximum Quantity for WooCommerce <= 2.0.0 - Missing Authorization
Medium
CVE-2024-11324
Accounting for WooCommerce <= 1.6.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-11814
Additional Custom Order Status for WooCommerce <= 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-5020
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
High
CVE-2024-10567
TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access
Medium
CVE-2024-11805
Quick License Manager – WooCommerce Plugin <= 2.4.17 - Reflected Cross-Site Scripting
Medium
CVE-2024-53817
Product Labels For Woocommerce <= 1.5.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-53742
Multilevel Referral Affiliate Plugin for WooCommerce <= 2.27 - Reflected Cross-Site Scripting
Medium
CVE-2024-53740
WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates < 2.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-53783
Ni WooCommerce Cost Of Goods <= 3.2.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-7747
Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types
Medium
CVE-2024-9170
Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode
Medium
CVE-2024-10857
Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read
Medium
CVE-2024-11418
Additional Order Filters for WooCommerce <= 1.21 - Reflected Cross-Site Scripting
High
CVE-2024-10729
Booking & Appointment Plugin for WooCommerce <= 6.9.0 - Authenticated (Subscriber+) Arbitrary Option Update
Medium
CVE-2024-11228
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting pafw_instant_payment Shortcode
High
CVE-2024-11034
Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form
Medium
CVE-2024-10519
Wishlist for WooCommerce: Multi Wishlists Per Customer PRO 3.0.8 - 3.1.2 - Reflected Cross-Site Scripting via wtab Parameter
Medium
CVE-2024-9635
Checkout with Cash App on WooCommerce <= 6.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-10813
Product Table for WooCommerce by CodeAstrology (wooproducttable.com) <= 3.5.1 - Information Exposure
Medium
CVE-2024-11361
PDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.