High
CVE-2024-43354
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-43323
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.28 - Insufficient Input Validation
Medium
CVE-2024-43312
WPC Frequently Bought Together for WooCommerce <= 7.1.9 - Missing Authorization
Medium
CVE-2024-43331
WP SMS <= 6.9.3 - Missing Authorization
Medium
CVE-2024-7092
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter
High
CVE-2024-43271
Woo Products Widgets For Elementor <= 2.0.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43238
weMail <= 1.14.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-43259
Order Export for WooCommerce <= 3.23 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-7503
WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
Medium
CVE-2024-43219
Persian WooCommerce <= 7.1.6 - Missing Authorization
Medium
CVE-2024-43213
WC Marketplace <= 4.1.17 - Reflected Cross-Site Scripting
Medium
CVE-2024-43214
myCred <= 2.7.2 - Unauthenticated Information Exposure
Medium
CVE-2024-43212
WpTravelly <= 1.7.7 - Missing Authorization
Medium
CVE-2024-43134
Waitlist Woocommerce ( Back in stock notifier ) <= 2.6 - Missing Authorization
Medium
CVE-2024-43127
Products, Order & Customers Export for WooCommerce <= 2.0.11 - Reflected Cross-Site Scripting
High
CVE-2024-43135
WPCafe <= 2.2.28 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43126
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.15 - Reflected Cross-Site Scripting
Critical
CVE-2024-43138
Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43128
WooCommerce Product Table Lite <= 3.5.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-6987
Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation
Critical
CVE-2024-43132
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Unauthenticated SQL Injection
Medium
CVE-2024-43131
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Missing Authorization to Unauthenticated Arbitrary Post/Page Deletion
Medium
CVE-2024-43163
ParcelPanel <= 4.3.2 - Reflected Cross-Site Scripting
High
CVE-2024-43121
HUSKY <= 1.3.6.1 - Authenticated (Shop Manager+) Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.