Medium
efc53d78-a664-48d0-a752-00c56b3f792f
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2023-23803
JustTables – WooCommerce Product Table <= 1.4.9 - Cross-Site Request Forgery via plugin_activation()
Medium
CVE-2023-23731
WishSuite <= 1.3.3 - Cross-Site Request Forgery via plugin_activation()
Medium
9bcc1965-c409-40ba-a942-175646ad8fda
No CAPTCHA reCAPTCHA for WooCommerce <= 1.2.6 - Authenticated(Admin+) Stored Cross-Site Scripting via Plugin Settings
Medium
CVE-2023-28988
Direct checkout, Add to cart redirect for Woocommerce <= 2.1.48 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-28662
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection
Medium
CVE-2022-41635
Advanced Shipment Tracking for WooCommerce <= 3.5.2 - Cross-Site Request Forgery via paginate_shipping_provider_list and filter_shipping_provider_list
Medium
CVE-2022-46864
Woocommerce Custom Checkout Fields Editor With Drag & Drop <= 0.1 - Reflected Cross-Site Scripting via 'tab'
Medium
CVE-2022-46858
Product Specifications for Woocommerce <= 0.6.0 - Reflected Cross-Site Scripting via Arbitrary Query String Parameter
Medium
CVE-2022-40702
Advanced Local Pickup for WooCommerce <= 1.5.2 - Missing Authorization
Medium
18f04566-3a63-41f3-aa9b-766304d56499
TH Side Cart and Menu Cart for Woocommerce <= 1.1.1 - Cross-Site Request Forgery
Critical
CVE-2023-28121
WooCommerce Payments 4.8.0 - 5.6.1 Authentication Bypass and Privilege Escalation
Medium
CVE-2023-28665
Bulk Price Update for Woocommerce <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-46812
Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.0.13 - Cross-Site Request Forgery via send_email
Medium
CVE-2022-46822
WooCommerce JazzCash Gateway Plugin <= 2.0 - Unauthenticated Cross-Site Scripting
Medium
cf13732b-7c24-443a-bae9-d8cf70b5cb33
Stock Sync for WooCommerce <= 2.3.2 - Cross-Site Request Forgery
Medium
CVE-2022-46793
Product Feed PRO for WooCommerce <= 12.4.0 - Cross-Site Request Forgery via update_project
Medium
CVE-2022-46807
Stock Sync for WooCommerce <= 2.3.2 - Missing Authorization
Medium
CVE-2023-28688
TH Variation Swatches <= 1.2.7 - Cross-Site Request Forgery via delete_settings
Medium
CVE-2023-25969
Multiple Plugins By ThemeHunk (Various Versions) - Missing Authorization via settings_init
Medium
CVE-2023-28422
Event Manager for WooCommerce <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mep_get_option' function
High
CVE-2023-22710
Return and Warranty Management System for WooCommerce <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-47164
Event Manager for WooCommerce <= 3.7.7 - Cross-Site Request Forgery leading to Uninstall Form Submission
Medium
CVE-2022-46795
Print Invoice & Delivery Notes for WooCommerce <= 4.7.2 - Cross-Site Request Forgery via ts_reset_tracking_setting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.