Medium
CVE-2025-14875
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2026-0656
iPaymu Payment Gateway for WooCommerce <= 2.0.2 - Missing Authentication to Unauthenticated Payment Bypass and Order Information Disclosure
Medium
CVE-2025-14891
Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter
Medium
CVE-2025-14059
EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal
Medium
CVE-2026-27327
YayMail – WooCommerce Email Customizer <= 4.3.2 - Missing Authorization
Medium
CVE-2025-14441
Popupkit <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Subscriber Data Deletion
Medium
CVE-2025-14034
ilGhera Support System for WooCommerce <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Deletion
Medium
CVE-2026-22461
CTX Feed <= 6.6.18 - Missing Authorization
High
CVE-2025-69342
Calafate <= 1.7.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-62091
Serial Codes Generator and Validator with WooCommerce Support <= 2.8.2 - Missing Authorization
Medium
CVE-2025-62092
Wiremo <= 1.4.99 - Missing Authorization
Medium
CVE-2025-62096
Maximum Products per User for WooCommerce <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62081
Live Shopping & Shoppable Videos For WooCommerce <= 2.2.0 - Missing Authorization
Medium
CVE-2025-62748
Web and WooCommerce Addons for WPBakery Builder <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62080
Live Shopping & Shoppable Videos For WooCommerce <= 2.2.0 - Cross-Site Request Forgery
Medium
CVE-2025-62141
Wawp <= 4.4 - Missing Authorization
Medium
CVE-2025-49352
Order Cancellation & Returns for WooCommerce <= 1.1.12 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-68547
Follow My Blog Post <= 2.4.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2025-62750
WooCommerce Parcelas <= 1.3.5 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2025-49356
Orders Chat for WooCommerce <= 2.0.0 - Missing Authorization
High
CVE-2025-62088
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-69334
Wishlist for WooCommerce <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-69038
Hyori <= 1.3.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-68528
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.