Medium
CVE-2023-23667
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2022-44633
YITH WooCommerce Gift Cards Premium <= 3.23.1 - Missing Authorization
Medium
CVE-2023-27607
Points and Rewards for WooCommerce <= 1.5.0 - Cross-Site Request Forgery to Settings Change
Medium
CVE-2023-27608
Points and Rewards for WooCommerce <= 1.5.0 - Missing Authorization
Critical
CVE-2023-2276
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change
Medium
CVE-2023-1839
PPOM for WooCommerce <= 32.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-2256
PPOM for WooCommerce <= 32.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-2452
Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-2275
WooCommerce Multivendor Marketplace – REST API <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order/Order Note Disclosure, Order Note Addition via REST API
Medium
CVE-2023-31094
Stock Sync for WooCommerce <= 2.4.0 - Reflected Cross-Site Scripting via page parameter
Medium
CVE-2023-28783
Woocommerce Tip/Donation <= 1.2 - Authenticated (Shop manager+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-27627
Woocommerce Email Report <= 2.4 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-30871
Stock Exporter for WooCommerce <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-45371
ShopEngine <= 4.1.1 - Cross-Site Request Forgery via get_product
Medium
75824b96-8674-4340-9e56-b0cb0f52503d
Robokassa payment gateway for Woocommerce <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-46856
Woocommerce Product Designer <= 4.3.3 - Cross-Site Request Forgery
Medium
CVE-2023-2179
WooCommerce Order Status Change Notifier <= 1.1.0 - Authenticated (Subscriber+) Arbitrary Order Status Update
High
CVE-2023-2180
Kiwiz - Certification de facturation - Woocommerce <= 2.1.3 - Unauthenticated Arbitrary File Download
High
CVE-2023-26325
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-30783
Smart WooCommerce Search <= 2.5.0 - Missing Authorization
Medium
CVE-2023-0948
Japanized For WooCommerce <= 2.5.6 - Reflected Cross-Site Scripting
Critical
CVE-2022-4118
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection
Medium
CVE-2023-30747
WooCommerce Easy Duplicate Product <= 0.3.0.0 - Reflected Cross-Site Scripting via wedp_duplicated
Medium
CVE-2023-0537
Product Slider For WooCommerce Lite <= 1.1.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Keys
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.