Mittel
CVE-2025-1303
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 3.822
Filter zurücksetzen
Hoch
CVE-2024-13359
Product Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Upload
Mittel
CVE-2025-1289
Plugin Oficial – Getnet para WooCommerce <= 1.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-13640
Print Invoice & Delivery Notes for WooCommerce <= 5.4.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Hoch
CVE-2024-10804
Ultimate Video Player <= 10.0 - Unauthenticated Arbitrary File Download
Mittel
CVE-2024-13904
Platform.ly for WooCommerce <= 1.1.6 - Unauthenticated Blind Server-Side Request Forgery
Hoch
CVE-2024-13320
CURCY - WooCommerce Multi Currency - Currency Switcher <= 2.3.6 - Unauthenticated SQL Injection
Mittel
CVE-2024-13810
Zass - WooCommerce Theme for Handmade Artists and Artisans <= 3.9.9.10 - Missing Authorization to Authenticated (Subscriber+) Demo Import
Hoch
CVE-2025-0956
WooCommerce Recover Abandoned Cart <= 24.4.0 - Unauthenticated PHP Object Injection
Mittel
CVE-2024-13811
Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import
Mittel
CVE-2024-13747
WooMail - WooCommerce Email Customizer <= 3.0.34 - Authenticated (Subscriber+) Missing Authorization to SQL Injection
Mittel
CVE-2024-13682
Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Cross-Site Request Forgery
Mittel
CVE-2024-13724
Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Missing Authorization
Mittel
CVE-2024-12812
WP ERP <= 1.13.3 - Authenticated (Employee+) Insecure Direct Object Reference
Mittel
CVE-2024-12109
Product Labels For Woocommerce (Sale Badges) <= 1.5.8 - Authenticated (Admin+) SQL Injection
Mittel
CVE-2024-10638
Product Labels For Woocommerce (Sale Badges) <= 1.5.10 - Authenticated (Admin+) SQL Injection
Mittel
CVE-2025-26899
Recapture for WooCommerce <= 1.0.43 - Cross-Site Request Forgery to Settings Update
Mittel
CVE-2024-12808
WP ERP <= 1.13.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Hoch
CVE-2025-26875
Multiple Shipping And Billing Address For Woocommerce <= 1.3 - Unauthenticated SQL Injection
Hoch
CVE-2025-26988
SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Unauthenticated SQL Injection
Mittel
CVE-2025-26553
Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin <= 2.2 - Reflected Cross-Site Scripting
Hoch
CVE-2025-26535
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.6 - Unauthenticated SQL Injection
Mittel
CVE-2024-9212
SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting
Mittel
CVE-2024-9217
Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.