High
CVE-2026-81286
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2026-82223
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.22 - Missing Authorization
High
CVE-2026-81288
Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. <= 3.1.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-81774
Product Attachment for WooCommerce <= 2.3.3 - Unauthenticated Information Exposure
Medium
CVE-2026-19948
Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter
Medium
CVE-2026-81280
Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce <= 4.0.0 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-79621
CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce < 6.1.3 - Unauthenticated Email Content Injection
High
CVE-2026-76585
Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-16947
Total processing card payments for WooCommerce <= 7.3 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-74927
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.13 - 5.0.14 - Unauthenticated Information Exposure
Medium
CVE-2026-83562
WCFM Marketplace – Multivendor Marketplace for WooCommerce <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2026-15369
Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout
Medium
CVE-2026-77695
Return Refund and Exchange For WooCommerce < 4.6.4 - Missing Authorization
Medium
CVE-2026-78137
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce < 2.1.2 - Unauthenticated Arbitrary Price Manipulation
Medium
CVE-2026-81762
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.6 - Missing Authorization
High
CVE-2026-16576
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Authenticated (Shop Manager+) Remote Code Execution
Medium
CVE-2026-81761
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.5.0 - Missing Authorization
High
CVE-2026-6176
Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form
Medium
CVE-2026-16568
Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce <= 0.4.62 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-81759
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.5.0 - Missing Authorization
Medium
CVE-2026-78139
Notifima – WooCommerce Stock Manager, Inventory Management, Waitlist < 3.1.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-78138
Finale Lite – Sales Countdown Timer & Discount for WooCommerce < 2.21.0 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-77701
WCFM Marketplace – Multivendor Marketplace for WooCommerce < 3.8.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Refund Request
Medium
CVE-2026-81277
Suggestion Engine for WooCommerce <= 2.0.11 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.