Medium
CVE-2025-48144
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2025-47660
WC Affiliate <= 2.16 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-47640
Printcart Web to Print Product Designer for WooCommerce <= 2.4.0 - Unauthenticated SQL Injection
Medium
CVE-2025-48128
Sharespine Woocommerce Connector <= 4.7.55 - Missing Authorization
Medium
CVE-2025-4101
MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion
Medium
CVE-2025-47563
CURCY <= 2.3.7 - Missing Authorization to Arbitrary Shortcode Execution
Medium
CVE-2025-48117
WooCommerce POS <= 1.7.8 - Missing Authorization
Critical
CVE-2025-47641
Printcart Web to Print Product Designer for WooCommerce <= 2.3.9 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-47577
TI WooCommerce Wishlist <= 2.9.2 - Unauthenticated Arbitrary File Upload
High
CVE-2025-60248
WPC Product Options for WooCommerce < 3.1.3 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-32920
TI WooCommerce Wishlist <= 2.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32922
WP2LEADS <= 3.5.0 - Cross-Site Request Forgery
Critical
CVE-2025-4564
TicketBAI Facturas para WooCommerce <= 3.18 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2025-47530
WPFunnels <= 3.5.18 - Unauthenticated PHP Object Injection
High
CVE-2025-47461
Subaccounts for WooCommerce <= 1.6.6 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Medium
CVE-2025-64289
Premmerce Product Search for WooCommerce <= 2.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-64290
Premmerce Product Search for WooCommerce <= 2.2.4 - Cross-Site Request Forgery
Medium
CVE-2025-3878
SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode
High
CVE-2025-3876
SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function
Critical
CVE-2025-47687
StoreKeeper for WooCommerce <= 14.4.4 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-4403
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function
High
CVE-2025-47682
SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Unauthenticated SQL Injection
High
CVE-2025-3419
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read
Medium
CVE-2025-47451
Product Quantity Dropdown For Woocommerce <= 1.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.