Mittel
CVE-2025-64631
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 3.822
Filter zurücksetzen
Mittel
CVE-2025-54004
WCFM – Frontend Manager for WooCommerce <= 6.7.24 - Missing Authorization
Mittel
CVE-2025-13439
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter
Mittel
CVE-2025-67564
Pixel Manager for WooCommerce <= 1.51.1 - Unauthenticated Information Exposure
Hoch
CVE-2025-67532
Hara <= 1.2.17 - Authenticated (Contributor+) Local File Inclusion
Hoch
CVE-2025-67528
Urna <= 2.5.12 - Authenticated (Contributor+) Local File Inclusion
Mittel
CVE-2025-66128
Sendinblue for WooCommerce <= 4.0.49 - Missing Authorization
Mittel
CVE-2025-68500
Prime Slider – Addons For Elementor <= 4.0.10 - Authenticated (Subscriber+) Server-Side Request Forgery
Mittel
CVE-2025-9207
TI WooCommerce Wishlist <= 2.10.0 - Unauthenticated HTML Injection
Hoch
CVE-2025-13077
افزونه پیامک ووکامرس فوق حرفه ای (جدید) payamito sms woocommerce <= 1.3.5 - Unauthenticated Time-Based Blind SQL Injection
Mittel
CVE-2025-14365
Eyewear prescription form <= 7.0.2 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Category Deletion
Mittel
CVE-2025-14366
Eyewear prescription form <= 7.0.2 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Product Creation
Mittel
CVE-2025-8617
YITH WooCommerce Quick View <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yith_quick_view Shortcode
Mittel
CVE-2025-12512
GenerateBlocks <= 2.1.2 - Authenticated (Contributor+) Information Exposure via Metadata
Mittel
CVE-2025-7960
King Addons for Elementor <= 51.1.53 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Mittel
CVE-2025-13456
Shopbuilder <= 3.2.1 - Reflected Cross-Site Scripting
Hoch
CVE-2025-14169
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection
Mittel
CVE-2025-12655
Hippoo Mobile App for WooCommerce <= 1.7.1 - Missing Authorization to Unauthenticated Limited File Write
Mittel
CVE-2025-13440
Premmerce Wishlist for WooCommerce <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist Deletion
Mittel
CVE-2025-13314
Product Filtering by Categories, Tags, Price Range for WooCommerce <= 1.1.6 - Missing Authorization to Unauthenticated Plugin Settings Modification
Mittel
CVE-2025-12883
Campay Woocommerce Payment Gateway <= 1.2.2 - Unauthenticated Payment Bypass
Mittel
CVE-2025-12783
Premmerce Brands for WooCommerce <= 1.2.13 - Missing Authorization To Authenticated (Subscriber+) Brand Permalink Settings Update
Mittel
CVE-2025-14165
Kirim.Email WooCommerce Integration <= 1.2.9 - Cross-Site Request Forgery to Settings Update
Mittel
CVE-2025-13029
Knowband Mobile App Builder <= 2.0.8 - Missing Authorization to Unauthenticated Arbitrary User Deletion
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.