Medium
CVE-2023-33999
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 115
Reset filters
Medium
CVE-2023-34386
WPC Smart Wishlist for WooCommerce <= 4.7.1 - Cross-Site Request Forgery via wishlist_add and wishlist_remove
Medium
CVE-2023-32962
WishSuite <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
7c7f6ef2-6c50-4739-8844-0db7d9ffe7f7
MC Woocommerce Wishlist <= 1.5.4 - Cross-Site Request Forgery
Medium
CVE-2023-23731
WishSuite <= 1.3.3 - Cross-Site Request Forgery via plugin_activation()
Medium
CVE-2022-45813
BeRocket Plugins <= (Various Versions) - Missing Authorization
Medium
CVE-2022-44630
YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery
High
b948574a-0aab-4596-83e6-04be21f78bc1
YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization
Medium
5ee19031-1e48-43b6-b492-980f2610f6cc
ProductX – Gutenberg WooCommerce Blocks – WooCommerce Builder, Wishlist for WooCommerce, Products Comparison, Quick View, Online Store – All in One Solution <= 2.2.5 - Multiple Cross-Site Scripting
Medium
CVE-2022-1465
WPC Smart Wishlist for WooCommerce <= 2.9.8 - Reflected Cross-Site Scripting
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
CVE-2022-0397
WPC Smart Wishlist for WooCommerce <= 2.9.3 - Reflected Cross-Site Scripting
Critical
CVE-2022-0412
TI WooCommerce Wishlist / TI WooCommerce Wishlist Pro < 1.40.1 - Unauthenticated SQL Injection
High
d99614e6-4543-4594-9a46-71ecc986be45
Wishlist and Compare for WooCommerce <= 1.0.4 - Authorization Bypass
High
CVE-2020-36725
TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update
Medium
CVE-2019-16251
YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change
Medium
5b266a09-22f3-4ac3-a2ba-8321503200e7
JVM WooCommerce Wishlist <= 1.2.6 - Insecure Direct Object Reference
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Medium
3737d7a0-76d6-4292-aa31-6ee2cb0e9575
YITH WooCommerce Wishlist <= 2.1.2 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.