Medium
CVE-2024-9531
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2024-9943
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates
Medium
CVE-2024-8667
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.10.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Publication
High
CVE-2024-9927
WooCommerce Order Proposal <= 2.0.5 - Authenticated (Shop Manager+) Privilege Escalation via Order Proposal
Medium
CVE-2024-49703
Event Manager for WooCommerce <= 4.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49687
Smart Manager <= 8.45.0 - Missing Authorization
Critical
CVE-2024-49658
Woocommerce Custom Profile Picture <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-49651
WooCommerce Maintenance Mode <= 2.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-49640
ACL Floating Cart for WooCommerce <= 0.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-49691
Product Filter by WBW <= 2.7.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-47640
WP ERP <= 1.13.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-10049
Edit WooCommerce Templates <= 1.1.2 - Reflected Cross-Site Scripting via page
Medium
CVE-2024-9213
Persian WooCommerce SMS <= 7.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-8541
Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons <= 2.6.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-49288
Email Template Customizer for WooCommerce <= 1.2.9.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2024-49283
CURCY <= 2.2.3 - Reflected Cross-Site Scripting
High
CVE-2024-49305
Email Verification for WooCommerce <= 2.8.10 - Unauthenticated SQL Injection
Medium
CVE-2024-49296
Custom Add to Cart Button Label and Link <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9944
WooCommerce <= 9.0.2 - Unauthenticated HTML Injection
Medium
CVE-2024-49244
CSV Product Import Export for WooCommerce <= 1.0.0 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-49218
Recently <= 1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-48047
Linked Variation for WooCommerce <= 1.0.5 - Cross-Site Request Forgery
Medium
CVE-2024-9756
Order Attachments for WooCommerce 2.0 - 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Upload
High
CVE-2024-9821
Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.