Media
CVE-2023-23667
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.822
Restablecer filtros
Media
CVE-2022-44633
YITH WooCommerce Gift Cards Premium <= 3.23.1 - Missing Authorization
Media
CVE-2023-27607
Points and Rewards for WooCommerce <= 1.5.0 - Cross-Site Request Forgery to Settings Change
Media
CVE-2023-27608
Points and Rewards for WooCommerce <= 1.5.0 - Missing Authorization
Crítica
CVE-2023-2276
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change
Media
CVE-2023-1839
PPOM for WooCommerce <= 32.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Media
CVE-2023-2256
PPOM for WooCommerce <= 32.0.6 - Reflected Cross-Site Scripting
Media
CVE-2023-2452
Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-2275
WooCommerce Multivendor Marketplace – REST API <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order/Order Note Disclosure, Order Note Addition via REST API
Media
CVE-2023-31094
Stock Sync for WooCommerce <= 2.4.0 - Reflected Cross-Site Scripting via page parameter
Media
CVE-2023-28783
Woocommerce Tip/Donation <= 1.2 - Authenticated (Shop manager+) Stored Cross-Site Scripting via plugin settings
Media
CVE-2023-27627
Woocommerce Email Report <= 2.4 - Unauthenticated Cross-Site Scripting
Media
CVE-2023-30871
Stock Exporter for WooCommerce <= 1.1.0 - Reflected Cross-Site Scripting
Media
CVE-2022-45371
ShopEngine <= 4.1.1 - Cross-Site Request Forgery via get_product
Media
75824b96-8674-4340-9e56-b0cb0f52503d
Robokassa payment gateway for Woocommerce <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-46856
Woocommerce Product Designer <= 4.3.3 - Cross-Site Request Forgery
Media
CVE-2023-2179
WooCommerce Order Status Change Notifier <= 1.1.0 - Authenticated (Subscriber+) Arbitrary Order Status Update
Alta
CVE-2023-2180
Kiwiz - Certification de facturation - Woocommerce <= 2.1.3 - Unauthenticated Arbitrary File Download
Alta
CVE-2023-26325
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.8 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2023-30783
Smart WooCommerce Search <= 2.5.0 - Missing Authorization
Media
CVE-2023-0948
Japanized For WooCommerce <= 2.5.6 - Reflected Cross-Site Scripting
Crítica
CVE-2022-4118
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection
Media
CVE-2023-30747
WooCommerce Easy Duplicate Product <= 0.3.0.0 - Reflected Cross-Site Scripting via wedp_duplicated
Media
CVE-2023-0537
Product Slider For WooCommerce Lite <= 1.1.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Keys
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.