Critical
CVE-2023-2986
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2023-2743
WP ERP <= 1.12.3 - Reflected Cross-Site Scripting
High
CVE-2023-2744
WP ERP <= 1.12.3 - Authenticated (Administrator+) SQL Injection via 'type'
Medium
CVE-2023-34376
Change WooCommerce Add To Cart Button Text <= 1.3 - Missing Authorization via rexvs_settings_submit
Medium
CVE-2023-3126
B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Information Disclosure
Medium
CVE-2023-3125
B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Price Modification
Medium
CVE-2023-34386
WPC Smart Wishlist for WooCommerce <= 4.7.1 - Cross-Site Request Forgery via wishlist_add and wishlist_remove
High
CVE-2023-34379
Cart2Cart: Magento to WooCommerce Migration <= 2.0.0 - Missing Authorization via setToken
High
CVE-2023-2781
User Email Verification for WooCommerce <= 3.5.0 - Authentication Bypass
Medium
CVE-2023-34008
WP ERP <= 1.12.3 - Reflected Cross-Site Scripting
Low
b9002f6e-4345-4908-9cb8-9841a2458eb7
CartFlows <= 1.11.11 - Insecure Direct Object Reference to Arbitrary Post Deletion
Medium
CVE-2023-34003
WooCommerce Box Office <= 1.1.51 - Missing Authorization
Medium
CVE-2023-34004
WooCommerce Box Office <= 1.1.50 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-34015
Advanced Flat rate shipping Woocommerce <= 1.6.4.4 - Cross-Site Request Forgery via enableDisable and deletePost
Medium
CVE-2023-34170
Quick/Bulk Order Form for WooCommerce <= 3.5.7 - Authenticated (Shop manager+) Stored Cross-Site Scripting
High
CVE-2023-2833
ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
Medium
3c8602ed-6c0d-4357-93e6-bab1ab38ffb2
Donation Platform for WooCommerce: Fundraising & Donation Management <= 1.2.9 - Cross-Site Request Forgery to Survey Submission
Medium
d549fcd5-6808-4d7d-bf1f-df8cfa458744
Bulk Order Form for WooCommerce <= 3.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-34184
Woocommerce Order address Print <= 3.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-45372
Product Gallery Slider for WooCommerce <= 2.2.8 - Cross-Site Request Forgery
Medium
CVE-2023-33925
WooCommerce Product Categories Selection Widget <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-29174
SKU Label Changer For WooCommerce <= 3.0 - Missing Authorization
High
CVE-2023-33331
WooCommerce Product Vendors <= 2.1.76 - Authenticated (Vendor admin+) SQL Injection
High
CVE-2023-33330
WooCommerce Follow-Up Emails <= 4.9.50 - Authenticated (Follow-up emails manager+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.