Medium
CVE-2024-13750
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2025-1780
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.25 - Cross-Site Request Forgery to Limited Settings Update
Medium
CVE-2024-13358
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
Medium
CVE-2024-13638
Order Attachments for WooCommerce <= 2.5.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
High
CVE-2024-13831
Tabs for WooCommerce <= 1.0.0 - Authentiated (Shop Manager+) PHP Object Injection in product_has_custom_tabs
Critical
CVE-2024-8425
WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-1505
Advanced AJAX Product Filters <= 1.6.8.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-10860
NextMove Lite – Thank You Page for WooCommerce <= 2.19.0 - Missing Authorization to Authenticated (Subscriber+) Deactivation Reason Submission
Medium
CVE-2025-27331
WooCommerce Display Products by Tags <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-27355
Woocommerce – Loi Hamon <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-27347
Direct Checkout Button for WooCommerce <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-27342
WooCommerce Recargo de Equivalencia <= 1.6.24 - Cross-Site Request Forgery
High
CVE-2025-26921
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.2.6 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-26984
SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-26928
Order Limit for WooCommerce <= 3.0.2 - Missing Authorization
Critical
CVE-2025-26933
WC Place Order Without Payment <= 2.6.7 - Unauthenticated Local File Inclusion
High
CVE-2025-26964
Eventin <= 4.0.20 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-26979
Funnel Builder by FunnelKit <= 3.9.0 - Unauthenticated Local File Inclusion
High
CVE-2025-26540
Helloprint <= 2.0.7 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2025-26534
Helloprint <= 2.0.7 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-26878
Autoship Cloud for WooCommerce Subscription Products <= 2.8.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-27322
QR Code for WooCommerce <= 1.2.0 - Reflected Cross-Site Scripting
Medium
d089bfee-3d23-4d35-83e0-7575702a21b4
Better Customer List for WooCommerce <= 1.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-27324
17TRACK for WooCommerce <= 1.2.10 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.