Medium
CVE-2026-93341
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2026-15095
Product Feed Manager for WooCommerce <= 6.6.43 - Authenticated (Shop Manager+) Path Traversal to File Deletion via 'provider' Parameter
High
CVE-2026-92969
HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX
High
CVE-2026-93836
WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter
Medium
CVE-2026-90985
WPC Smart Compare for WooCommerce <= 6.6.0 - Unauthenticated Information Exposure
Medium
CVE-2026-80342
Payment Plugins for PayPal WooCommerce <= 2.0.26 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-88929
Sale Booster 7.0.0 - 7.5.1 - Unauthenticated Information Exposure
Medium
CVE-2026-87981
Paymob for WooCommerce <= 4.1.13 - Missing Authorization
Medium
CVE-2026-93528
NP Quote Request for WooCommerce <= 2.4.15 - Unauthenticated Information Exposure
Medium
CVE-2026-91077
Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Missing Authorization
Medium
CVE-2026-87978
Paymob for WooCommerce <= 4.1.13 - Unauthenticated Payment Bypass
Medium
CVE-2026-93510
Points and Rewards for WooCommerce <= 2.10.3 - Missing Authorization
Medium
CVE-2026-87979
Paymob for WooCommerce <= 4.1.13 - Missing Authorization
Medium
CVE-2026-86785
Social Commerce for WooCommerce <= 2.5.4 - Missing Authorization
Medium
CVE-2026-93928
E-cab Taxi Booking Manager for Woocommerce < 2.0.8 - Missing Authorization
Critical
CVE-2026-82187
WooCommerce Online Product Designer <= 2.14.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-9858
Partial Shipment for Woocommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Modification via wxp_order_shipment, wxp_order_item_shipment, and wxp_order_set_shipped AJAX Actions
Medium
CVE-2026-9766
Empik for Woocommerce <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Product Meta Update via empik_csv_process_emp_log_classes AJAX Action
Medium
CVE-2026-9613
Datalogics Ecommerce Delivery <= 2.6.65 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via Multiple AJAX Actions (datalogics_create_shipping / datalogics_cancel_shipping)
Medium
CVE-2026-11899
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure via GetInvoiceDetail AJAX Handler
Medium
CVE-2026-9832
Payment Gateway of Stripe for WooCommerce <= 5.0.8 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint
Medium
CVE-2026-12402
OTP Login & Register Woocommerce <= 2.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'fb-config' Setting
Medium
CVE-2026-75959
GoPay for WooCommerce <= 1.0.34 - Authenticated (Shop Manager+) SQL Injection via 'log_table_filter' Parameter
Medium
CVE-2026-13770
AppMySite <= 3.15.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via save_ams_license_key AJAX Handler
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.