Critical
CVE-2024-10763
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2025-22285
Pallet Packaging for WooCommerce <= 1.1.15 - Missing Authorization
High
CVE-2024-13346
Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-11746
Discover the Best Woocommerce Product Brands Plugin for WordPress – Woocommerce Brands Plugin <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-22632
WooCommerce Pricing – Product Pricing <= 1.0.9 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-13528
Customer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via Shortcode
High
CVE-2024-13487
CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
Medium
CVE-2024-10563
WooCommerce Cart Count Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24752
Essential Addons for Elementor <= 6.0.14 - Reflected Cross-Site Scripting
Medium
CVE-2025-22639
Distance Rate Shipping For WooCommerce <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22674
Product Blocks for WooCommerce <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22638
Product Table For WooCommerce <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22644
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22667
Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets <= 1.8.2 - Missing Authorization
Medium
CVE-2025-22673
EAN for WooCommerce <= 5.3.5 - Missing Authorization
Medium
CVE-2025-25119
Woocommerce osCommerce Sync <= 2.0.20 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22694
Hide Shipping Method For WooCommerce <= 1.5.1 - Missing Authorization
Medium
CVE-2024-11829
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13341
MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.1.11 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-13775
WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure
Medium
CVE-2025-22683
NotificationX <= 2.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-13343
WooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
High
CVE-2024-13472
WooCommerce Product Table Lite <= 3.9.4 - Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting
Medium
CVE-2024-13424
Ni Sales Commission For WooCommerce <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Commission Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.