Medium
CVE-2025-30879
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-13925
Klarna Checkout for WooCommerce <= 2.13.4 - Denial of Service
Medium
CVE-2025-30837
WooCommerce Fattureincloud <= 2.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-30896
WP ERP <= 1.13.4 - Missing Authorization
High
CVE-2025-30895
WpEvently <= 4.2.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-30579
Pesapal Gateway for Woocommerce <= 2.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-30917
SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-30888
Custom Fields Account Registration For Woocommerce <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2025-30765
FlexStock <= 3.13.1 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-1913
Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
High
CVE-2025-1912
Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Low
CVE-2025-1911
Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Medium
CVE-2025-1769
Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Medium
CVE-2025-2302
Advanced Woo Search <= 3.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via aws_search_terms Shortcode
High
CVE-2025-1514
Active Products Tables for WooCommerce <= 1.0.6.7 - Unauthenticated Arbitrary Filter Call
Medium
CVE-2025-28889
Custom Product Stickers for Woocommerce <= 1.9.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-30609
AppExperts <= 1.4.3 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-1973
Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Low
CVE-2025-1972
Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
High
CVE-2025-1971
Export and Import Users and Customers <= 2.6.2 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
High
CVE-2025-1970
Export and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Medium
CVE-2025-1311
WooCommerce Multivendor Marketplace – REST API <= 1.6.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-2186
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId'
Medium
CVE-2025-26541
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.