Hoch
CVE-2025-47569
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 3.822
Filter zurücksetzen
Hoch
CVE-2025-39496
Product Filter Pro < 2.9.6 - Unauthenticated SQL Injection
Kritisch
CVE-2025-39476
Revo <= 4.0.26 - Unauthenticated Local File Inclusion
Mittel
CVE-2025-47570
WooCommerce Photo Reviews - Review Reminders - Review for Discounts <= 1.3.13 - Reflected Cross-Site Scripting
Hoch
CVE-2025-47608
Recover abandoned cart for WooCommerce <= 2.5 - Unauthenticated SQL Injection
Mittel
CVE-2025-4420
Vayu Blocks <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via containerWidth Parameter
Mittel
CVE-2025-5103
Ultimate Gift Cards for WooCommerce <= 3.1.4 - Authenticated (Administrator+) SQL Injection via wps_wgm_save_post Function
Mittel
CVE-2025-3919
WordPress Comments Import & Export <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Mittel
CVE-2025-5285
Product Subtitle for WooCommerce <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via htmlTag Parameter
Hoch
CVE-2025-48124
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Arbitrary File Download
Mittel
CVE-2025-5292
Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder <= 5.11.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Mittel
CVE-2025-48334
Woo Slider Pro <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Mittel
CVE-2025-48331
WooCommerce Orders & Customers Exporter <= 5.0 - Authenticated (Subscriber+) Information Exposure
Mittel
CVE-2025-4597
Woo Slider Pro - Drag Drop Slider Builder For WooCommerce <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Kritisch
CVE-2025-5058
eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()
Mittel
CVE-2025-4602
eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Read
Kritisch
CVE-2025-4603
eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion
Hoch
CVE-2025-4336
eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()
Mittel
CVE-2025-32285
Butcher < 2.54 - Reflected Cross-Site Scripting
Hoch
CVE-2025-31056
WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce <= 1.1.0 - Unauthenticated SQL Injection
Hoch
CVE-2025-31397
Bus Ticket Booking with Seat Reservation for WooCommerce <= 1.7 - Unauthenticated SQL Injection
Mittel
CVE-2025-47585
Booking and Rental Manager <= 2.3.8 - Missing Authorization
Kritisch
CVE-2025-48125
WP Event Manager <= 3.1.51 - Unauthenticated Local File Inclusion
Kritisch
CVE-2025-32286
Butcher <= 2.40 - Unauthenticated Local File Inclusion
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.