Medium
e10a95e3-e834-4f84-85c1-4a1ffad41b5b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
2ae70225-3597-463b-907c-d2a3a7bcecb4
WooCommerce Stock Manager < 1.0.9 - Authorization Bypass
Medium
1e5e16c9-53d2-4fdd-8370-920b22f52033
WooCommerce <= 2.6.2 - Stored Cross-Site Scripting
Critical
CVE-2016-10972
Newspaper - News & WooCommerce WordPress Theme <= 6.7 - Arbitrary Options Update
Medium
CVE-2017-18634
Newspaper - News & WooCommerce WordPress Theme < 6.7.2 - Cross-Site Scripting
Medium
CVE-2016-10987
افزونه پیامک ووکامرس Persian WooCommerce SMS < 3.3.3 - Cross-Site Scripting
Medium
64a7a4db-8b28-4085-91b0-4ea5343c5643
Import WooCommerce < 1.1 - Reflected Cross-Site Scripting
High
CVE-2016-10923
Store Toolkit for WooCommerce <= 1.5.7 - Privilege Escalation
Critical
CVE-2016-10935
WooCommerce – Store Exporter <= 1.8.3 - Missing Authorization
High
CVE-2016-10922
Store Toolkit for WooCommerce <= 1.5.6 - Missing Authorization
Medium
56953c6f-7ff9-45bf-9265-01240938e395
WooCommerce < 2.4.9 - Cross-site Scripting
High
00243844-a2ec-42fd-84d9-03e89619e361
Abandoned Cart Lite for WooCommerce < 1.9 - SQL Injection
Critical
41108c2c-99b2-4aff-8c06-bee0b6547a9a
Smart Manager For WooCommerce < 3.9.7 - Unauthenticated SQL Injection
Medium
39a74c20-42a2-4099-8e6c-9989a3ba081d
Salient < 5.5.53 - DOM Cross-Site Scripting
Medium
CVE-2015-5065
PayPal Currency Converter BASIC for WooCommerce <= 1.3 - Path Traversal to Arbitrary File Read
High
88b3a69d-2c94-48e6-b965-8a67b2fe42b2
WooCommerce <= 2.3.10 - PHP Object Injection
Critical
c1f64b77-5c8b-44f3-b1a8-6aa9f13624b7
WooCommerce Amazon Affiliates < 9.0.2.16 - Unauthenticated Arbitrary File Upload
High
CVE-2015-2329
WooCommerce <= 2.3.5 - Stored Cross-Site Scripting
Medium
CVE-2015-2069
WooCommerce <= 2.2.10 - Cross-Site Scripting
Medium
0324852f-9e19-467c-9b0b-4c9fe2dd1cc0
WooCommerce <= 2.2.2 - Reflected Cross-Site Scripting
High
CVE-2014-6313
WooCommerce <= 2.2.2 - Cross-Site Scripting via range Parameter
Medium
eeae2042-ccad-4e4b-a321-8ea58af9d775
WooCommerce – Store Exporter <= 1.7.5 - Stored Cross-Site Scripting
Medium
b59f13b9-8ad3-44a7-90a0-1f959ba55700
WooCommerce Store Exporter <= 1.7.5 - Reflected Cross-Site Scripting
Medium
CVE-2014-4558
SwipeHQ Payment Gateway WooCommerce <= 2.7.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.