Medium
CVE-2024-31235
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-31304
WC Marketplace <= 4.1.3 - Missing Authorization
Critical
CVE-2024-31266
Advanced Order Export For WooCommerce <= 3.4.4 - Authenticated (Shop Manager+) Remote Code Execution
Medium
CVE-2024-31297
Wholesale For WooCommerce <= 2.3.0 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-31262
WooCommerce Checkout Field Editor (Checkout Manager) <= 2.1.8 - Cross-Site Request Forgery
Medium
CVE-2024-31283
Advanced Local Pickup for WooCommerce <= 1.6.2 - Missing Authorization
Medium
CVE-2024-2656
Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import
Medium
CVE-2024-2946
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget
Medium
CVE-2024-1743
WooCommerce Customers Manager <= 29.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-2868
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout
Medium
CVE-2024-1756
WooCommerce Customers Manager <= 29.7 - Missing Authorization to Information Exposure
Medium
CVE-2024-1807
Product Sort and Display for WooCommerce <= 2.4.1 - Missing Authorization
Medium
CVE-2024-30511
FG PrestaShop to WooCommerce <= 4.45.1 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2024-31109
Woocommerce Social Media Share Buttons <= 1.3.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2024-31098
New Order Notification for Woocommerce <= 2.0.2 - Missing Authorization
Medium
CVE-2024-2974
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-31117
WooCommerce Bookings Calendar <= 1.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30537
WPC Badge Management for WooCommerce <= 2.4.0 - Missing Authorization
Medium
CVE-2024-30542
WholesaleX <= 1.3.2 - Unauthenticated Privilege Escalation
Medium
CVE-2024-31100
Popup Cart Lite for WooCommerce <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2024-30466
WooCommerce Multilingual & Multicurrency <= 5.3.4 - Missing Authorization
High
CVE-2024-0952
WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id
Medium
CVE-2024-30485
Finale Lite <= 2.18.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation
Medium
CVE-2024-0956
WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.