Medium
CVE-2024-11362
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-11370
Subaccounts for WooCommerce <= 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9111
Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-52497
Shopready <= 3.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-10792
Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-11400
HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter
Medium
CVE-2024-10365
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Critical
CVE-2024-52475
Wawp < 3.0.18 - Unauthenticated Privilege Escalation
High
CVE-2024-10899
WooCommerce Product Table Lite <= 3.8.6 - Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting
Medium
CVE-2024-9239
Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-10486
Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File
Medium
CVE-2024-52469
WooCommerce Price Alert <= 1.0.4 - Reflected Cross-Site Scripting
Critical
CVE-2024-52440
Xpresslane Fast Checkout <= 1.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-52460
AtaraPay WooCommerce Payment Gateway <= 2.0.13 - Reflected Cross-Site Scripting
Medium
CVE-2025-24553
Shipping with Venipak for WooCommerce <= 1.22.4 - Reflected Cross-Site Scripting
High
CVE-2025-24556
MooWoodle – WordPress & Moodle LMS Integration Bridge <= 3.2.4 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-8873
PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-10614
Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation
Medium
CVE-2025-24551
Radio Buttons and Swatches for WooCommerce <= 1.1.20 - Reflected Cross-Site Scripting
Medium
CVE-2024-8961
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9356
Yotpo: Product & Photo Reviews for WooCommerce <= 1.7.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-8978
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure
High
CVE-2024-8979
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
High
CVE-2024-52398
CDI <= 5.5.3 - Authenticated (Shop Manager+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.