Critical
CVE-2025-60207
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Critical
CVE-2025-29009
Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-30959
Product XML Feed Manager for WooCommerce <= 2.9.2 - Missing Authorization
Critical
CVE-2025-60235
Helpdesk Support Ticket System for WooCommerce <= 2.1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-5530
WPC Smart Compare for WooCommerce <= 6.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-49950
Official Integration for Billingo <= 4.2.5 - Authenticated (Shop Manager+) Privilege Escalation
Medium
CVE-2025-49319
Wishlist for WooCommerce <= 3.2.3 - Missing Authorization
High
CVE-2025-59555
Medizin < 1.9.7 - Unauthenticated Local File Inclusion
High
CVE-2025-49430
Ultimate Video Player WordPress & WooCommerce Plugin <= 10.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-3780
WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.16 - Missing Authorization to Unauthenticated Plugin Settings Modification
Medium
CVE-2025-49947
WooCommerce Registration Fields Plugin - Custom Signup Fields <= 3.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-49034
Funnel Builder by FunnelKit <= 3.10.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-60211
WooCommerce Registration Fields Plugin - Custom Signup Fields <= 3.2.3 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-49888
PW WooCommerce On Sale! <= 1.39 - Missing Authorization
Medium
CVE-2025-50028
Ultimate Push Notifications <= 1.3.0 - Missing Authorization
Medium
CVE-2025-28955
Easy Video Player Wordpress & WooCommerce <= 10.0 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-29001
WooCommerce Shop Page Builder <= 2.27.7 - Missing Authorization
Medium
CVE-2025-29007
LMSACE Connect <= 3.4 - Missing Authorization
Medium
CVE-2025-6729
PayMaster for WooCommerce <= 0.4.31 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-50032
Paytiko for WooCommerce <= 1.4.7 - Missing Authorization
Medium
CVE-2025-24780
Printcart Web to Print Product Designer for WooCommerce <= 2.4.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-53569
Trust Payments Gateway for WooCommerce (JavaScript Library) <= 1.3.6 - Cross-Site Request Forgery
High
CVE-2025-2932
JKDEVKIT <= 1.9.4 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-5817
Amazon Products to WooCommerce <= 1.2.7 - Unauthenticated Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.