Medium
CVE-2023-33999
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2023-3365
MultiParcels Shipping For WooCommerce <= 1.14.13 - Missing Authorization via get_history
High
CVE-2023-2843
MultiParcels Shipping For WooCommerce <= 1.14.12 - Authenticated(Subscriber+) SQL Injection via id
Medium
CVE-2023-37989
Easyship WooCommerce Shipping Rates <= 0.8.9 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-0604
WP Food Manager <= 1.0.3 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3671
MultiParcels Shipping For WooCommerce <= 1.15.3 - Reflected Cross-Site Scripting
High
CVE-2023-3459
Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Change
Medium
CVE-2023-37977
WPFunnels <= 2.7.16 - Reflected Cross-Site Scripting
Medium
CVE-2023-37894
Variation Images Gallery for WooCommerce <= 2.3.3 - Reflected Cross-Site Scripting via style
Medium
CVE-2023-37972
WooCommerce Product Stock Alert <= 2.0.1 - Information Disclosure
Medium
CVE-2023-37975
Variation Swatches for WooCommerce <= 2.3.7 - Reflected Cross-Site Scripting
High
CVE-2023-37969
Checkout with Zelle on Woocommerce <= 3.1 - Missing Authorization
Medium
CVE-2023-3508
WooCommerce Pre-Orders <= 2.0.2 - Cross-Site Request Forgery
Medium
CVE-2022-4888
Multiple Addify Plugins <= (Various Versions) - Cross-Site Request Forgery
Medium
CVE-2023-37873
WooCommerce Ship to Multiple Addresses <= 3.8.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-37871
WooCommerce GoCardless Gateway <= 2.5.6 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2023-37872
WooCommerce Ship to Multiple Addresses <= 3.8.5 - Missing Authorization
Medium
CVE-2023-37870
WooCommerce Warranty Requests <= 2.1.9 - Missing Authorization
Medium
50b26952-bf59-4236-93b4-6b4928609c15
WPFunnels <= 2.7.15 - Insecure Direct Object Reference
Medium
CVE-2023-3507
WooCommerce Pre-Orders <= 2.0.2 - Cross-Site Request Forgery to Order Cancellation
Medium
CVE-2023-37971
WooCommerce Product Stock Alert <= 2.0.1 - Missing Authorization via API
Medium
747afa58-182a-4fb3-bfe3-f15db0b1d85a
WP SMS <= 6.1.5 - Cross-Site Request Forgery
High
CVE-2023-3525
Getnet Argentina para Woocommerce 0.0.1 - 0.0.4 - Authorization Bypass via webhook
Medium
0007d830-2e68-4c2f-8fac-f4363bc2d73d
Gift Cards (Gift Vouchers and Packages) <= 4.3.5 - Cross-Site Request Forgery in new_voucher_template.php
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.