Medium
CVE-2022-47589
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2023-0061
Judge.me Product Reviews for WooCommerce <= 1.3.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4836
Breadcrumb <= 1.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0072
WC Vendors Marketplace <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Sites Scripting via Shortcode
Medium
CVE-2023-0062
EAN for WooCommerce <= 4.4.2 - Authenticated (Contributor+ )Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4489
HUSKY – Products Filter for WooCommerce Professional <= 1.3.1 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2023-0173
WPFunnels <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
Medium
CVE-2023-0144
Event Manager and Tickets Selling Plugin for WooCommerce <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4701
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation
Medium
CVE-2023-0071
WP Tabs <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4791
Product Slider and Carousel with Category for WooCommerce <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
b6bff35f-f881-4c60-9611-4a04727bac36
WooCommerce Eway Gateway <= 3.5.0 - Insecure Direct Object Reference
Critical
CVE-2022-4872
WooCommerce Chained Products < 2.12.0 - Missing Authorization to Arbitrary Options Update
Critical
CVE-2022-4395
Membership For WooCommerce <= 2.1.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-4017
Booster (<= 6.0.0), Booster Plus (<= 6.0.0), and Booster Elite (<= 6.0.0) for WooCommerce - Cross-Site Request Forgery
Medium
CVE-2022-4629
Product Slider for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4547
Conditional Payment Methods for WooCommerce <= 1.0 - Authenticated (Admin+) SQL Injection
Medium
d6421c33-152d-4e50-a96c-f97e2981b72f
RD Order Modifier for WooCommerce <= 1.0.5 - Cross-Site Request Forgery
Medium
CVE-2022-4661
Woo Products Widgets For Elementor <= 1.0.7 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2022-4426
Mautic Integration for WooCommerce < 1.0.3 - Cross-Site Request Forgery leading to Arbitrary Options Update
Medium
CVE-2022-4431
WOOCS <= 1.3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
84003388-c47c-41db-8d2d-4643aa375a89
Appsero <= 1.2.1 - Missing Authorization
Medium
CVE-2022-3923
ActiveCampaign for WooCommerce <= 1.9.7 - Cross-Site Request Forgery
Medium
CVE-2022-47150
Appsero <= 1.2.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.