High
CVE-2025-60047
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2025-54750
Funnel Builder by FunnelKit <= 3.11.1 - Unauthenticated Local File Inclusion
High
CVE-2025-7654
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
Medium
CVE-2025-62889
King Addons for Elementor <= 51.1.62 - Missing Authorization
Medium
CVE-2025-62887
King Addons for Elementor <= 51.1.62 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7496
WPC Smart Compare for WooCommerce <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2025-49434
Laposta WooCommerce <= 1.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2025-8898
Taxi Booking Manager for Woocommerce | E-cab <= 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover
Medium
CVE-2024-8393
Woocommerce Blocks – Woolook <= 1.7.0 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2025-49432
Ultimate Video Player <= 10.1 - Missing Authorization
High
CVE-2025-8342
WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass
High
CVE-2025-6025
Order Tip for WooCommerce <= 1.5.4 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts
Medium
CVE-2025-53575
Primer MyData for Woocommerce <= 4.2.5 - Cross-Site Request Forgery
Medium
CVE-2025-53347
Kalium <= 3.18.3 - Cross-Site Request Forgery
Medium
CVE-2025-55712
The Plus Addons for Elementor Page Builder Lite <= 6.3.13 - Missing Authorization
High
CVE-2025-47588
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.9 - Authenticated (Shop Manager+) Arbitrary Code Execution
High
CVE-2025-54697
Kadence WooCommerce Email Designer <= 1.5.16 - Authenticated (Shop Manager+) Arbitrary Options Update
High
CVE-2025-49869
Eventin <= 4.0.31 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-54692
Membership For WooCommerce <= 2.9.0 - Missing Authorization
High
CVE-2025-5391
WooCommerce Purchase Orders <= 1.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2025-30993
Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.7 - Missing Authorization
Medium
CVE-2025-60088
WebinarIgnition <= 4.06.04 - Missing Authorization
High
CVE-2025-4796
Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
Medium
CVE-2026-22333
YITH WooCommerce Compare <= 3.6.0 - Authenticated (Admin+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.