Hoch
CVE-2026-22385
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 3.822
Filter zurücksetzen
Hoch
CVE-2026-22432
Woopy - Multipurpose Store WooCommerce WordPress Shop Theme <= 1.2 - Unauthenticated Local File Inclusion
Hoch
CVE-2026-1929
Advanced Woo Labels <= 2.37 - Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter
Hoch
CVE-2026-27381
Aora - Home & Lifestyle Elementor WooCommerce Theme <= 1.3.15 - Unauthenticated Local File Inclusion
Mittel
CVE-2026-27374
WooCommerce Order Details <= 3.1 - Missing Authorization
Mittel
CVE-2026-27376
Claue - Clean, Minimal Elementor WooCommerce <= 2.2.7 - Reflected Cross-Site Scripting
Mittel
CVE-2026-32410
WBW Currency Switcher for WooCommerce <= 2.2.5 - Missing Authorization
Mittel
CVE-2026-32407
WPC Smart Wishlist for WooCommerce <= 5.0.8 - Missing Authorization
Mittel
CVE-2026-32406
WPC Product Bundles for WooCommerce <= 8.4.5 - Missing Authorization
Mittel
CVE-2026-2385
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay
Mittel
CVE-2025-14339
weMail <= 2.0.7 - Missing Authorization to Unauthenticated Form Deletion
Mittel
CVE-2026-32398
TeraWallet – For WooCommerce <= 1.5.15 - Authenticated (Customer+) Race Condition
Kritisch
CVE-2026-27540
Woocommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Arbitrary File Upload
Hoch
CVE-2026-27541
Wholesale Suite <= 2.2.6 - Authenticated (Shop Manager) Privilege Escalation
Kritisch
CVE-2026-27542
Woocommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation
Mittel
CVE-2026-39671
Extra Fees Plugin for WooCommerce <= 4.3.3 - Cross-Site Request Forgery
Mittel
CVE-2025-13930
Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
Mittel
CVE-2026-1455
Whatsiplus Scheduled Notification for Woocommerce <= 1.0.1 - Cross-Site Request Forgery to 'wsnfw_save_users_settings' AJAX Action
Mittel
CVE-2025-14357
Mega Store Woocommerce <= 6.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page Creation and Settings Change
Hoch
CVE-2025-12975
CTX Feed – WooCommerce Product Feed Manager <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation
Mittel
CVE-2025-12500
Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - Unauthenticated Limited File Upload
Mittel
CVE-2025-12375
Printful Integration for WooCommerce <= 2.2.11 - Authenticated (Contributor+) Server-Side Request Forgery
Mittel
CVE-2026-2386
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type'
Hoch
CVE-2026-2232
Product Table and List Builder for WooCommerce Lite <= 4.6.2 - Unauthenticated Time-Based SQL Injection via 'search' Parameter
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.