High
CVE-2026-97271
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2026-97259
Pay with Vipps and MobilePay for WooCommerce <= 6.2.4 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-97272
Premmerce Permalink Manager for WooCommerce <= 2.3.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-62081
Flexible PDF Coupons – Gift Cards & Vouchers for WooCommerce <= 1.14.11 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
b3a4ff32-52a8-4bb0-8bf6-536a89d338e9
WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field
Medium
CVE-2026-12241
Advanced Woo Labels – Product Labels & Badges for WooCommerce <= 2.51 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-97299
Razorpay Payment Links for WooCommerce <= 2.1.5 - Cross-Site Request Forgery
Medium
CVE-2026-27371
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-97298
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.86 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97261
Notivo Notification for WooCommerce <= 1.4.2 - Unauthenticated Information Exposure
Medium
CVE-2026-94298
BuildKit <= 1.0.28 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-93624
Music Player for WooCommerce <= 1.9.1 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2026-13718
Tabs Responsive <= 2.5 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
High
CVE-2026-96816
Trusted Shops Easy Integration for WooCommerce <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-93651
Minimum and Maximum Quantity for WooCommerce <= 2.1.2 - Authenticated (Author+) PHP Object Injection
High
CVE-2026-85573
All in One Files Upload for WooCommerce 2.0.3 - 2.0.16 - Unauthenticated Stored Cross-Site Scripting via SVG Upload
Medium
CVE-2026-93580
InPost for WooCommerce 1.7.5 - 1.9.7 - Missing Authorization
Medium
CVE-2026-96815
Vitepos – Point of Sale (POS) for WooCommerce <= 3.5.0 - Authenticated (Custom Role+) Privilege Escalation
Medium
CVE-2026-93771
Cost of Goods: Product Cost & Profit Calculator for WooCommerce <= 3.5.2 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2026-97292
YITH WooCommerce Tab Manager <= 2.15.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-85576
All in One Files Upload for WooCommerce <= 2.0.16 - Missing Authorization
Medium
CVE-2026-96817
MakeCommerce for WooCommerce <= 4.1.0 - Missing Authorization
Medium
CVE-2026-94274
YayReviews 1.0.4 - 1.4.0 - Unauthenticated Information Exposure
High
CVE-2026-96343
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.9 - Authenticated (Custom Role+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.