Medium
88fdd087-4bce-4ead-bc78-c6bdbaa70d9c
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
d99614e6-4543-4594-9a46-71ecc986be45
Wishlist and Compare for WooCommerce <= 1.0.4 - Authorization Bypass
Critical
53580b24-c0a7-4578-bb11-5952ebcacc42
UltimateWoo – The Ultimate WooCommerce Plugin with Unlimited Usage <= 0.1.10 - PHP Object Injection
High
CVE-2021-4444
Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization
Medium
CVE-2021-24300
PickPlugins Product Slider for WooCommerce <= 1.13.21 - Reflected Cross-Site Scripting
High
CVE-2021-24190
WooCommerce Conditional Marketing Mailer <= 1.5.1 - Improper Authorization
High
22713937-d834-46cf-83ec-6f9f61b548e3
Conditional Marketing Mailer for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Medium
CVE-2021-24323
WooCommerce <= 5.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24256
Elementor Header & Footer Builder <= 1.5.7 - Stored Cross-Site Scripting
Medium
CVE-2021-24262
WooLentor – WooCommerce Elementor Addons + Builder <= 1.8.5 - Authenticated Stored Cross-Site Scripting
High
992b362b-b01f-4c91-83ac-dd612b93ee03
Woocommerce Customers Manager <= 26.5 - Cross-Site Request Forgery to Account Creation
Medium
0444eff7-88bd-4933-94c5-bcb21a044b88
Woocommerce Customers Manager < 26.6 - Reflected Cross-Site Scripting
Critical
CVE-2021-24212
WooCommerce Help Scout <= 2.9.1 - Arbitrary File Upload to Remote Code Execution
Critical
CVE-2021-24171
WooCommerce Upload Files <= 59.3 - Arbitrary File Upload
Medium
CVE-2021-24169
Advanced Order Export For WooCommerce <= 3.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2021-4414
Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass
High
486fa1a6-aa47-4bf9-b1da-582e316f6bcb
Woocommerce Customers Manager <= 26.4 - Authenticated Account Creation and Privilege Escalation
Medium
CVE-2021-27349
Advanced Order Export for WooCommerce <= 3.1.7 - Cross-Site Scripting
Medium
14c07d55-285b-4c7c-bed6-4c5224a7044a
Extra Charges To Payment Gateway For WooCommerce <= 2.0.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2021-3120
YITH WooCommerce Gift Cards Premium <= 3.3.0 - Arbitrary File Upload
Medium
9d3b6448-14cc-4146-9a93-98150031fcb6
Wibar | Wine and Vineyard WooCommerce WordPress Theme < 1.2.1 - Cross-Site Scripting
Medium
27337cf2-18a0-4f26-a674-3ab2003b4838
WooCommerce Anti-Fraud <= 3.2 - Insecure Direct Object Reference
Critical
562d0052-7f1a-441b-9ff7-1c8bcb4b74b4
Abandoned Cart Lite for WooCommerce <= 5.8.2 - SQL Injection
High
d0a311b7-5582-4581-bf4e-636d8a936ac6
WooCommerce Blocks <= 3.7.0 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.