Medium
CVE-2026-105057
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2026-42637
PayPlug for WooCommerce (Official) <= 3.1.0 - Missing Authorization to Unauthenticated Settings Change
High
CVE-2026-42635
WooCommerce Simple Auctions <= 3.0.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-103323
Integration for Epos Now and WooCommerce 4.6.0 - 4.11.1 - Missing Authorization
High
CVE-2026-32568
WooCommerce Designer Pro <= 1.9.33 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2026-32576
Faktur Pro for WooCommerce <= 3.2.2 - Authenticated (Customer+) Insecure Direct Object Reference
Medium
CVE-2026-32578
ECPay Ecommerce for WooCommerce <= 1.1.2606090 - Missing Authorization
Medium
CVE-2026-95526
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) <= 1.2.2 - Missing Authorization
High
CVE-2026-32580
WooCommerce Lottery <= 2.2.9 - Unauthenticated SQL Injection
High
CVE-2026-32557
WooCommerce Appointments <= 5.3.2 - Unauthenticated SQL Injection
Medium
CVE-2026-95589
Advanced Partial Payment or Deposit for WooCommerce <= 4.0.1 - Missing Authorization
Medium
CVE-2026-103349
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce <= 13.5.7 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2026-100515
Photo Reviews for WooCommerce <= 1.2.30 - Reflected Cross-Site Scripting
Medium
CVE-2026-102383
Lookzy LookBook for WooCommerce <= 1.1.14 - Missing Authorization
Medium
CVE-2026-97275
BuildKit – Product Builder for WooCommerce – Custom PC Builder <= 1.0.28 - Unauthenticated Cart Data Manipulation
Medium
CVE-2026-95597
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.5.17 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2026-95596
ShopBuilder – WooCommerce Builder For Elementor <= 3.4.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-94568
Pay with Vipps and MobilePay for WooCommerce <= 6.2.0 - Authenticated (Shop Manager+) PHP Object Injection
High
CVE-2026-97660
WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name
Medium
CVE-2026-104313
WPC Estimated Delivery Date for WooCommerce <= 4.0.1 - Reflected Cross-Site Scripting via 'rule_data' Parameter
High
CVE-2026-18443
Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter
Medium
CVE-2026-103888
WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameter
High
CVE-2026-101923
Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter
Medium
CVE-2026-11399
Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.