Medium
CVE-2024-6722
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Critical
CVE-2024-7257
YayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function
Critical
CVE-2024-39651
WooCommerce PDF Vouchers <= 4.9.4 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-39648
Eventin <= 4.0.5 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-39650
WooCommerce PDF Vouchers <= 4.9.4 - Missing Authorization
Medium
CVE-2024-39652
WooCommerce PDF Vouchers <= 4.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-39657
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.18 - Cross-Site Request Forgery
Medium
CVE-2024-6346
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget
Medium
CVE-2024-6687
CTT Expresso para WooCommerce <= 3.2.12 - Information Exposure via Unprotected Directory
Medium
CVE-2024-6566
Aramex Shipping WooCommerce <= 1.1.21 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6458
WooCommerce Product Table Lite <= 3.5.1 - Missing Authorization to (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2024-6460
Grow by Tradedoubler <= 2.0.21 - Unauthenticated Local File Inclusion
Medium
CVE-2024-6836
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+) Settings Update
High
CVE-2024-7027
WooCommerce - PDF Vouchers <= 4.9.3 - Authentication Bypass to Voucher Vendor
Medium
CVE-2024-3934
Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2024-38775
CTX Feed <= 6.5.6 - Authenticated (Shop Manager+) Arbitrary Options Update
Medium
CVE-2024-6560
Addonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure
Critical
CVE-2024-6636
WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation
High
CVE-2024-38772
JetWidgets for Elementor and WooCommerce <= 1.1.7 - Authenticated (Contributor+) Limited Local File Inclusion
High
CVE-2024-6635
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass
High
CVE-2024-6637
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password
Medium
CVE-2024-6799
YITH Essential Kit for WooCommerce #1 <= 2.34.0 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install, Activation, and Deactivation
Medium
CVE-2024-5703
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization
High
CVE-2024-38768
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) <= 2.0.8.6 - Authenticated (contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.