Medium
CVE-2024-1172
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-1054
Booster for WooCommerce <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1276
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1236
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-25596
Doofinder for WooCommerce <= 2.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-25092
NextMove Lite <= 2.17.0 - Missing Authorization to Authenticated(Subscriber+) Plugin Activation
Medium
CVE-2024-1122
Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export
Medium
CVE-2024-1044
Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review
Medium
CVE-2024-24878
Portugal CTT Tracking for WooCommerce <= 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-24883
Prime Slider – Addons For Elementor <= 3.11.10 - Incorrect Authorization via bdt_duplicate_as_draft
Medium
CVE-2024-24881
WP SMS <= 6.5.2 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2024-24886
Product Labels For Woocommerce <= 1.5.3 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2024-24885
Woocommerce Vietnam Checkout <= 2.0.7 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2024-24866
Biteship <= 2.2.24 - Reflected Cross-Site Scripting via biteship_error and biteship_message
Medium
CVE-2024-24837
FG Drupal to WordPress <= 3.67.0 - Cross-Site Request Forgery via ajax_importer
Medium
CVE-2024-24835
BEAR <= 1.1.4 - Missing Authorization via Several Functions
Medium
CVE-2024-24834
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
Medium
CVE-2024-24841
Add Customer for WooCommerce <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-0954
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1047
ThemeIsle SDK <= Various Versions - Missing Authorization
Medium
CVE-2024-24799
WooCommerce Box Office <= 1.2.2 - Missing Authorization
Medium
CVE-2024-24719
Location Picker at Checkout for WooCommerce <= 1.8.9 - Missing Authorization via checkout_map_rules_order_ajax_handler
High
CVE-2024-24796
Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently <= 4.1.1 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save
Medium
CVE-2024-0796
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.