Medium
CVE-2022-47172
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2023-28415
Side Cart Woocommerce (Ajax) <= 2.2 Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
20910787-b99d-475e-acc9-cc2bb669aa56
Waitlist Woocommerce ( Back in stock notifier ) <= 2.5.2 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2023-2329
WooCommerce Google Sheet Connector < 1.3.6 - Cross-Site Request Forgery
Medium
CVE-2023-36511
WooCommerce Order Barcodes <= 1.6.4 - Cross-Site Request Forgery
Medium
CVE-2023-36514
WooCommerce Ship to Multiple Addresses <= 3.8.5 - Cross-Site Request Forgery
Medium
7f73d0a6-2eae-4d85-96ce-db5902bd6e3a
WooCommerce Pre-Orders <= 2.0.1 - Reflected Cross-Site Scripting
Medium
3fa62b8f-1c2f-4bc9-9f2a-8b9765c2d30d
Login/Signup Popup <= 2.3 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2023-35915
WooCommerce Payments <= 5.9.0 - Authenticated (Shop manager+) SQL Injection via currency parameters
Medium
CVE-2023-35912
Potent Donations for WooCommerce <= 1.1.9 - Cross-Site Request Forgery in hm_wcdon_admin_page
Medium
CVE-2023-35917
WooCommerce PayPal Payments <= 2.0.4 - Cross-Site Request Forgery
Medium
CVE-2023-35914
WooCommerce Subscriptions <= 5.1.2 - Missing Authorization to Insecure Direct Object Reference
Medium
CVE-2023-35880
WooCommerce Brands <= 1.6.49 - Cross-Site Request Forgery
Medium
CVE-2023-35918
WooCommerce Bulk Stock Management <= 2.2.33 - Cross-Site Scripting
Critical
CVE-2023-1597
tagDiv Cloud Library < 2.7 - Missing Authorization to Arbitrary User Metadata Update
Medium
CVE-2023-35916
WooCommerce Payments <= 5.9.0 - Missing Authorization via redirect_pay_for_order_to_update_payment_method
Medium
CVE-2023-35879
WooCommerce Product Vendors <= 2.1.78 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2023-35876
WooCommerce Square <= 3.8.1 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-35091
Stock Manager for WooCommerce <= 2.10.0 - Cross-Site Request Forgery
High
CVE-2023-34000
WooCommerce Stripe Payment Gateway <= 7.4.0 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Disclosure
Medium
CVE-2023-35048
Booking and Rental Manager <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-35049
WooCommerce Stripe Payment Gateway <= 7.4.0 - Missing Authorization
Medium
CVE-2023-2450
FiboSearch - AJAX Search for WooCommerce <= 1.23.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-34382
Dokan <=3.7.19 - Authenticated(Shop Manager+) PHP Object Injection via create_dummy_vendor
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.