Critical
CVE-2024-8030
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 115
Reset filters
Critical
CVE-2024-43917
TI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection
Critical
CVE-2024-43132
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Unauthenticated SQL Injection
Medium
CVE-2024-43131
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Missing Authorization to Unauthenticated Arbitrary Post/Page Deletion
Medium
CVE-2024-37110
WishList Member X < 3.26.7 - Missing Authorization to Information Disclosure
High
CVE-2024-37107
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2024-37109
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Remote Code Execution
High
CVE-2024-37106
WishList Member X < 3.26.7 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2024-37113
WishList Member X < 3.26.7 - Unauthenticated Information Exposure
High
CVE-2024-37108
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2024-37112
WishList Member X <= 3.25.1 - Unauthenticated Arbitrary SQL Execution
Medium
CVE-2024-37111
WishList Member X < 3.26.7 - Unauthenticated Denial of Service
Medium
CVE-2024-34385
YITH WooCommerce Wishlist <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-34813
MC Woocommerce Wishlist <= 1.7.8 - Missing Authorization
Medium
CVE-2024-34819
MC Woocommerce Wishlist <= 1.7.2 - Missing Authorization
Medium
CVE-2024-29927
WishSuite <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0512
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist
Medium
CVE-2024-0513
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist
Critical
CVE-2024-23512
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks <= 3.1.4 - PHP Object Injection via wopb_wishlist and wopb_compare
Medium
CVE-2023-48761
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization
High
CVE-2023-48760
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action
Medium
CVE-2023-48762
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery
Medium
CVE-2023-5230
TM WooCommerce Compare & Wishlist <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
82420667-9ba6-46ed-9a53-d16850755bb9
TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.