Medium
CVE-2024-51693
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-6479
SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-6480
SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2024-51626
Woocommerce Quote Calculator <= 1.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-9165
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9430
Get Quote For Woocommerce – Request A Quote For Woocommerce <= 1.0.0 - Missing Authorization to Unauthenticated Quote PDF and CSV Download
Critical
CVE-2024-50525
Plug your WooCommerce into the largest catalog of customized print products from Helloprint <= 2.0.4 - Unauthenticated Arbitrary File Upload
High
CVE-2024-50508
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Download
Medium
CVE-2024-10233
SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode
High
CVE-2024-10436
WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2024-10437
WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation
Critical
CVE-2024-50509
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2024-50510
AR For Woocommerce <= 6.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-50494
Sudan Payment Gateway for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-50482
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload
High
CVE-2024-50479
Woocommerce Quote Calculator <= 1.1 - Unauthenticated SQL Injection
Medium
CVE-2024-9109
UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset
Medium
CVE-2024-50421
WooCommerce PDF Invoices & Packing Slips <= 3.8.6 - Missing Authorization
High
CVE-2024-50416
WPC Shop as a Customer for WooCommerce <= 1.2.6 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-50447
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50448
YITH WooCommerce Product Add-Ons <= 4.14.1 - Reflected Cross-Site Scripting
High
CVE-2024-9186
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.2.2 - Unauthenticated SQL Injection
Medium
CVE-2024-9214
Extra Product Options Builder for WooCommerce <= 1.2.133 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-10050
Elementor Header & Footer Builder <= 1.6.43 - Authenticated (Contributor+) Information Disclosure via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.