High
CVE-2024-56230
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2025-24584
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.3.0 - Missing Authorization
Medium
CVE-2025-24586
Shipment Tracker for Woocommerce <= 1.4.23 - Reflected Cross-Site Scripting
Medium
CVE-2024-56265
WooCommerce PDF Vouchers < 4.9.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-56228
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-56207
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2025-24581
Instantio <= 3.3.7 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2024-56027
Leads CRM <= 2.0.13 - Reflected Cross-Site Scripting
High
CVE-2024-12432
WPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Key
Medium
CVE-2024-12220
SMS for WooCommerce <= 2.8.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12395
WooCommerce Additional Fees On Checkout (Free) <= 1.4.7 - Reflected Cross-Site Scripting via 'number'
Medium
CVE-2024-12311
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.43 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-55992
WooCommerce Basic Ordernumbers <= 1.4.4 - Missing Authorization
Medium
CVE-2024-55996
Dreamfox Media Payment gateway per Product for Woocommerce <= 3.5.8 - Missing Authorization
High
CVE-2024-56008
Spreadr Woocommerce <= 1.0.4 - Missing Authorization to Arbitrary Content Deletion
Medium
CVE-2024-56009
Spreadr Woocommerce <= 1.0.4 - Missing Authorization
Medium
CVE-2024-12517
WooCommerce Cart Count Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12448
Posts and Products Views for WooCommerce <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24574
PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-11911
WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation
Medium
CVE-2024-11809
Primer MyData for Woocommerce <= 4.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-9608
MyParcel <= 4.24.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-54386
Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart <= 3.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12421
Coupon Affiliates – Affiliate Plugin for WooCommerce <= 5.16.7.1 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.