Medium
CVE-2024-7514
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-9538
ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template
Medium
CVE-2024-8913
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template
Medium
CVE-2024-9205
Maximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-9377
Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-8629
WooCommerce Multilingual & Multicurrency with WPML <= 5.3.7 - Reflected Cross-Site Scripting
High
CVE-2024-45293
PHPSpreadsheet Library < 2.3.0 - XXE Injection
Medium
CVE-2024-9384
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9345
Product Delivery Date for WooCommerce – Lite <= 2.7.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-9237
Fish and Ships <= 1.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-8499
Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice
Medium
CVE-2024-8254
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-8793
Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More <= 2.7.2.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-9289
WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege Escalation
Medium
CVE-2024-47367
YITH WooCommerce Product Add-Ons <= 4.13.0 - Reflected Cross-Site Scripting
High
CVE-2024-47350
YITH WooCommerce Ajax Search <= 2.8.0 - Unauthenticated SQL Injection
Medium
CVE-2024-47629
Ultimate Store Kit Elementor Addons <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47622
Advanced Woo Labels <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47395
Robokassa payment gateway for Woocommerce <= 1.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-47634
CartBounty – Save and recover abandoned carts for WooCommerce <= 8.2 - Cross-Site Request Forgery
Medium
CVE-2024-9189
EU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization
Medium
CVE-2024-8788
EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting
High
CVE-2024-8922
Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php
High
CVE-2024-7149
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.