High
CVE-2026-18443
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 31
Reset filters
Critical
CVE-2025-10656
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Missing Authorization to Unauthenticated Privilege Escalation via Admin Account Creation
High
CVE-2026-57704
Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management <= 8.90.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-14203
Smart Manager <= 8.91.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-45216
Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management <= 8.85.0 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2026-1128
eCommerce <= 3.15.1 - Cross-Site Request Forgery to Coupon Deletion
High
CVE-2026-1235
eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection
High
CVE-2025-48122
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated SQL Injection
High
CVE-2025-48124
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Arbitrary File Download
Critical
CVE-2025-48123
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Remote Code Execution
Critical
CVE-2025-48129
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Privilege Escalation
Critical
CVE-2025-39378
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Local File Inclusion
High
CVE-2025-30615
WP e-Commerce Style Email <= 0.6.2 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2025-22710
Smart Manager <= 8.52.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-52462
WP e-Commerce Style Email <= 0.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-49687
Smart Manager <= 8.45.0 - Missing Authorization
Medium
CVE-2024-1516
WP eCommerce <= 3.15.1 - Missing Authorization to Unauthenticated Arbitrary Post Creation
Critical
CVE-2024-1514
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
High
CVE-2024-0566
Smart Manager - WooCommerce Advanced Bulk Edit, Inventory Management & more... <= 8.27.0 - Authenticated (Admin+) SQL Injection
High
3c43939f-c0c7-4388-80ae-44bdf67675c7
WP eCommerce < 3.11.4 - SQL Injection
Critical
668ba3a9-d53c-45ab-854f-1a9e83dd54b8
WP e-Commerce – Store Exporter <= 1.6.6 - Missing Authorization
Critical
588ece40-a848-4b2c-9db5-e63e0d11dda0
WP e-Commerce – Store Toolkit <= 2.0.1 - Missing Authorization
Critical
41108c2c-99b2-4aff-8c06-bee0b6547a9a
Smart Manager For WooCommerce < 3.9.7 - Unauthenticated SQL Injection
Medium
ed0860db-0e1f-4929-90d5-ff2766ba71ad
WP eCommerce <= 3.9.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.