High
CVE-2023-3677
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2023-35881
WooCommerce One Page Checkout <= 2.3.0 - Authenticated (Contributor+) Local File Inclusion via `woocommerce_one_page_checkout`
High
CVE-2023-39312
Avada <= 7.11.1 - Authenticated(Author+) Arbitrary File Upload via Zip Extraction
Medium
CVE-2023-39922
Avada <= 7.11.1 - Missing Authorization
High
CVE-2023-39307
Avada <= 7.11.1 - Authenticated(Contributor+) Arbitrary File Upload via 'ajax_import_options'
High
CVE-2023-39313
Avada <= 7.11.1 - Authenticated(Contributor+) Server Side Request Forgery via 'ajax_import_options'
Medium
CVE-2023-36506
YITH WooCommerce Waiting List <= 2.6.0 - Cross-Site Request forgery via 'save_mail_status'
Critical
b280155e-6d07-448d-922c-4a0ea21f4992
Biometric Login for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation
Medium
CVE-2023-41874
Order Delivery Date for WooCommerce <= 3.20.0 - Reflected Cross-Site Scripting via 'orddd_lite_custom_startdate' and 'orddd_lite_custom_enddate'
Critical
CVE-2023-3162
Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass
High
0903bd2b-240f-4791-bfa6-f727d193af4a
Booster for WooCommerce 7.0.0 - Authenticated (Shop Manager+) Missing Authorization to Arbitrary Options Update
Medium
CVE-2023-3954
MultiParcels Shipping For WooCommerce <= 1.15.3 - Reflected Cross-Site Scripting
Critical
82420667-9ba6-46ed-9a53-d16850755bb9
TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API
High
6d041edb-70f3-4894-8a78-f6881541054c
Shop as a Customer for WooCommerce <= 1.1.7 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2023-3366
MultiParcels Shipping For WooCommerce <= 1.15.1 - Cross-Site Request Forgery
High
3c730a69-015a-4b36-aa16-eff6916a302f
Shop as a Customer for WooCommerce <= 1.2.3 - Authenticated (Shop Manager+) Privilege Escalation
Medium
CVE-2023-39159
Woocommerce Blocker Lite <= 2.1.5 - Cross-Site Request Forgery
Medium
CVE-2023-25788
Saphali Woocommerce Lite <= 1.8.13 - Cross-Site Request Forgery via 'woocommerce_saphali_page_s_l'
Medium
CVE-2023-39162
User Email Verification for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-39158
Woocommerce Category Banner Management <= 2.4.1 - Cross-Site Request Forgery
Medium
CVE-2022-47182
APIExperts Square for WooCommerce <= 4.4.1 - Missing Authorization
High
c5ce2d08-6e01-4a7c-a2d5-ba98639107a8
MultiParcels Shipping For WooCommerce <= 1.15.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-38481
Integration for WooCommerce and Zoho CRM <= 1.3.6 - Open Redirect via setup_plugin
Medium
CVE-2023-38478
Integration for WooCommerce and QuickBooks <= 1.2.3 - Open Redirect via setup_plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.