Medium
CVE-2024-13652
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2024-10591
MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics <= 1.5.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update
Medium
CVE-2024-13415
Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 5.1.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Critical
CVE-2025-0493
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion
Medium
CVE-2024-13623
Order Export for WooCommerce <= 3.24 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
High
CVE-2024-13694
WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function
Medium
CVE-2024-12861
W2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2024-13696
Flexible Wishlist for WooCommerce <= 1.2.25 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter
High
CVE-2024-13726
Themes Coder <= 1.3.4 - Unauthenticated SQL Injection
Medium
CVE-2024-12334
WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12826
GoHero Store Customizer for WooCommerce <= 3.5 - Missing Authorization to Unuthenticated Settings Update
Medium
CVE-2025-24625
Taxonomy/Term and Role based Discounts for WooCommerce <= 5.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-24748
Avada <= 7.11.10 - Missing Authorization
High
CVE-2025-24650
Tourfic <= 2.15.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-24755
PDF Invoices for WooCommerce + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24644
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.7.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Medium
CVE-2025-24657
Wishlist for WooCommerce <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24594
Linet ERP-Woocommerce Integration <= 3.5.7 - Cross-Site Request Forgery
Medium
CVE-2025-24596
WooCommerce Product Table Lite <= 3.8.7 - Missing Authorization
Medium
CVE-2025-24603
Print Barcode Labels for your WooCommerce products/orders <= 3.4.10 - Missing Authorization
Medium
CVE-2025-24633
Build Private Store For Woocommerce <= 1.0 - Missing Authorization
Medium
CVE-2025-23991
Product Size Charts Plugin for WooCommerce <= 2.4.5 - Missing Authorization
Medium
CVE-2025-24681
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.10.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-24705
WooCommerce Quick View <= 1.1.1 - Unauthenticated Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.