Mittel
CVE-2026-105057
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 3.822
Filter zurücksetzen
Mittel
CVE-2026-42637
PayPlug for WooCommerce (Official) <= 3.1.0 - Missing Authorization to Unauthenticated Settings Change
Hoch
CVE-2026-42635
WooCommerce Simple Auctions <= 3.0.10 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-103323
Integration for Epos Now and WooCommerce 4.6.0 - 4.11.1 - Missing Authorization
Hoch
CVE-2026-32568
WooCommerce Designer Pro <= 1.9.33 - Authenticated (Subscriber+) Remote Code Execution
Mittel
CVE-2026-32576
Faktur Pro for WooCommerce <= 3.2.2 - Authenticated (Customer+) Insecure Direct Object Reference
Mittel
CVE-2026-32578
ECPay Ecommerce for WooCommerce <= 1.1.2606090 - Missing Authorization
Mittel
CVE-2026-95526
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) <= 1.2.2 - Missing Authorization
Hoch
CVE-2026-32580
WooCommerce Lottery <= 2.2.9 - Unauthenticated SQL Injection
Hoch
CVE-2026-32557
WooCommerce Appointments <= 5.3.2 - Unauthenticated SQL Injection
Mittel
CVE-2026-95589
Advanced Partial Payment or Deposit for WooCommerce <= 4.0.1 - Missing Authorization
Mittel
CVE-2026-103349
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce <= 13.5.7 - Authenticated (Shop Manager+) PHP Object Injection
Mittel
CVE-2026-100515
Photo Reviews for WooCommerce <= 1.2.30 - Reflected Cross-Site Scripting
Mittel
CVE-2026-102383
Lookzy LookBook for WooCommerce <= 1.1.14 - Missing Authorization
Mittel
CVE-2026-97275
BuildKit – Product Builder for WooCommerce – Custom PC Builder <= 1.0.28 - Unauthenticated Cart Data Manipulation
Mittel
CVE-2026-95597
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.5.17 - Missing Authorization to Unauthenticated Settings Update
Hoch
CVE-2026-95596
ShopBuilder – WooCommerce Builder For Elementor <= 3.4.1 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-94568
Pay with Vipps and MobilePay for WooCommerce <= 6.2.0 - Authenticated (Shop Manager+) PHP Object Injection
Hoch
CVE-2026-97660
WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name
Mittel
CVE-2026-104313
WPC Estimated Delivery Date for WooCommerce <= 4.0.1 - Reflected Cross-Site Scripting via 'rule_data' Parameter
Hoch
CVE-2026-18443
Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter
Mittel
CVE-2026-103888
WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameter
Hoch
CVE-2026-101923
Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter
Mittel
CVE-2026-11399
Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.