Medium
CVE-2023-3547
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Critical
CVE-2023-4703
All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation
Medium
CVE-2023-41690
WiserNotify Social Proof <= 2.5 - Missing Authorization
High
CVE-2023-41686
Woocommerce Support System <= 1.2.2 - Missing Authorization
Medium
CVE-2023-41683
TelSender <= 1.14.11 - Missing Authorization
Medium
CVE-2023-41240
Pricing Deals for WooCommerce <= 2.0.3.2 - Missing Authorization via vtprd_ajax_clone_rule
Medium
CVE-2023-40670
ReviewX <= 1.6.17 - Missing Authorization in rx_coupon_from_submit
Medium
CVE-2023-4270
Min Max Control <= 4.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-4160
WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2023-4245
WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-4040
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Missing Authorization to Arbitrary Order Status Modification
Medium
CVE-2023-4376
Serial Codes Generator and Validator with WooCommerce Support <= 2.4.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-40602
Doofinder for WooCommerce <= 1.5.49 - Unauthenticated Open Redirect
Medium
CVE-2023-40559
WooCommerce Dynamic Pricing and Discount Rules <= 2.4.0 - Cross-Site Request Forgery
Medium
CVE-2023-40561
WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking <= 3.7.1 - Cross-Site Request Forgery
Medium
CVE-2023-4161
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation
Medium
CVE-2023-40326
Putler Connector for WooCommerce <= 2.12.0 - Missing Authorization via 'send_resync_request'
Medium
CVE-2023-40327
Putler Connector for WooCommerce <= 2.12.0 - Missing Authorization via 'putler_connector_sync_complete'
Low
CVE-2023-4216
Orders Tracking for WooCommerce <= 1.2.5 - Authenticated (Administrator+) Directory Traversal via 'file_url'
Medium
39c9f055-2527-4678-bda1-27a29ab24acd
Products Quick View for WooCommerce <= 2.2.0 - Missing Authorization
Medium
CVE-2023-3764
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save
Medium
CVE-2022-47168
Printful Integration for WooCommerce <= 2.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-32296
Kangu para WooCommerce <= 2.2.10 - Reflected Cross-Site Scripting
Medium
CVE-2023-40212
WooCommerce Product Attachment <= 2.1.8 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.