Mittel
CVE-2024-6033
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 3.822
Filter zurücksetzen
Mittel
CVE-2024-6579
Web and WooCommerce Addons for WPBakery Builder <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification
Kritisch
CVE-2024-6457
HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection
Mittel
CVE-2024-2691
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode
Hoch
CVE-2024-6353
Wallet for WooCommerce <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search[value]'
Mittel
CVE-2024-38745
Wholesale Suite <= 2.1.12 - Missing Authorization
Mittel
CVE-2024-38740
Packlink PRO shipping module <= 3.4.6 - Missing Authorization
Mittel
CVE-2024-3983
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion
Mittel
CVE-2024-2843
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion via 'Delete'
Mittel
CVE-2024-38702
Product Delivery Date for WooCommerce – Lite <= 2.7.2 - Missing Authorization
Mittel
CVE-2024-38747
HitPay Payment Gateway for WooCommerce <= 4.1.3 - Information Exposure via Log Files
Mittel
CVE-2024-38699
Wallet System for WooCommerce <= 2.5.13 - Information Exposure via Log Files
Mittel
CVE-2024-1747
WooCommerce Customers Manager <= 30.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Hoch
CVE-2024-6666
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id
Mittel
CVE-2024-37943
YITH WooCommerce Ajax Product Filter <= 5.1.0 - Reflected Cross-Site Scripting
Mittel
CVE-2024-38677
REVIEWS.io <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-38691
Metorik – Reports & Email Automation for WooCommerce <= 1.7.1 - Cross-Site Request Forgery
Mittel
CVE-2024-38669
WooCommerce Predictive Search <= 6.0.1 - Reflected Cross-Site Scripting
Mittel
CVE-2024-38683
WooCommerce Report <= 1.4.5 - Reflected Cross-Site Scripting
Mittel
CVE-2024-38680
Appmaker – Convert WooCommerce to Android & iOS Native Mobile Apps <= 1.36.12 - Reflected Cross-Site Scripting
Mittel
CVE-2024-37935
Woocommerce OpenPos <= 7.0.1 - Missing Authorization to Information Exposure
Kritisch
CVE-2024-37932
Woocommerce OpenPos <= 6.4.4 - Unauthenticated Arbitrary File Deletion
Kritisch
CVE-2024-37933
Woocommerce OpenPos <= 6.4.4 - Unauthenticated SQL Injection
Mittel
CVE-2024-5669
XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.