Medium
CVE-2023-46078
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Critical
CVE-2023-5601
WooCommerce Ninja Forms Product Add-ons <= 1.7.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-30492
Minimum Purchase for WooCommerce <= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-45638
Eupago Gateway For Woocommerce <= 3.1.9 - Cross-Site Request Forgery via eupago_page_content
Medium
CVE-2023-45271
ProductX – Gutenberg WooCommerce Blocks <= 2.7.8 - Missing Authorization via option_data_save
Medium
CVE-2023-45101
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization in Reviews Exporter
Medium
CVE-2023-45267
IRivYou <= 2.2.1 - Cross-Site Request Forgery via saveOptionsReviewsPlugin
Medium
c5429fb1-7072-4a00-8fb3-48d4f876417f
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization
Medium
CVE-2023-40002
Booster for WooCommerce <= 7.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Medium
CVE-2023-45006
WooODT Lite <= 2.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-44995
WooCommerce Login Redirect <= 2.2.4 - Cross-Site Request Forgery
Medium
CVE-2023-45072
Order auto complete for WooCommerce <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-45009
Captcha/Honeypot for Contact Form 7 <= 1.11.3 - Captcha Bypass
Medium
CVE-2023-44986
Abandoned Cart Lite for WooCommerce <= 5.15.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5230
TM WooCommerce Compare & Wishlist <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44260
Woocommerce ESTO <= 2.23.1 - Cross-Site Request Forgery via saveSetting
Low
CVE-2023-5957
Ni Purchase Order(PO) For WooCommerce <= 1.2.1 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-4938
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Medium
CVE-2023-4941
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Medium
CVE-2023-4926
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
Medium
CVE-2023-4924
BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion
Medium
CVE-2023-4923
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
Medium
CVE-2023-4935
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Deletion
Medium
CVE-2023-4920
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.