Medium
CVE-2024-54333
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-12265
Web3 Cryptocurrency Payments by DePay for WooCommerce <= 2.12.17 - Missing Authorization to Information Exposure
Medium
CVE-2024-12160
Seraphinite Bulk Discounts for WooCommerce <= 2.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-54342
Staggs Product Configurator for WooCommerce <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-54312
Persian Woocommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-10124
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
Medium
CVE-2024-54328
Invoice Payment for WooCommerce <= 1.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-54357
Avada <= 7.11.10 - Cross-Site Request Forgery
Critical
CVE-2024-54375
Woolook <= 1.7.0 - Unauthenticated Local File Inclusion
Medium
CVE-2024-11727
NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-12040
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion via 'theme'
Critical
CVE-2024-54383
WooCommerce PDF Vouchers < 4.9.9 - Authentication Bypass
Medium
CVE-2024-12004
WPC Order Notes for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
High
CVE-2024-10959
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth
Medium
CVE-2024-10046
افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-54240
Blaze Online eParcel for WooCommerce <= 1.3.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-54262
Import Export For WooCommerce <= 1.6.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-12257
CardGate Payments for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-11842
DN Shipping by Weight for WooCommerce <= 1.1.1 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2024-11943
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.2.2 - Reflected Cross-Site Scripting via add_query_arg Function
Medium
CVE-2024-11201
myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode
Medium
CVE-2024-11687
Next-Cart Store to WooCommerce Migration <= 3.9.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-54241
Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce <= 1.5 - Missing Authorization
Medium
CVE-2024-11276
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.