Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

339,774

All time

Critical · Active

10,860

CVSS ≥ 9.0

New · 14 days

2,598

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 481–510 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-60173	high	7.1/10	WordPress GST for WooCommerce Plugin <= 2.0 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 26, 2025 9mo ago
CVE-2025-60171	high	7.1/10	WordPress Conditional Cart Messages for WooCommerce – YourPlugins.com Plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 26, 2025 9mo ago
CVE-2025-60159	medium	4.3/10	WordPress Nota Fiscal Eletrônica WooCommerce plugin <= 3.4.0.9 - Broken Access Control vulnerability	Sep 26, 2025 9mo ago
CVE-2025-60158	medium	5.9/10	WordPress Nota Fiscal Eletrônica WooCommerce plugin <= 3.4.0.9 - Cross Site Scripting (XSS) vulnerability	Sep 26, 2025 9mo ago
CVE-2025-58917	medium	6.5/10	WordPress Quantities and Units for WooCommerce plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability	Sep 26, 2025 9mo ago
CVE-2025-10173	low	2.7/10	ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.3 - Insufficient Authorization to Authenticated (Editor+) Settings Update	Sep 26, 2025 9mo ago
CVE-2025-9054	critical	9.8/10	MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler'	Sep 24, 2025 9mo ago
CVE-2025-10412	critical	9.8/10	Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'	Sep 23, 2025 9mo ago
CVE-2025-59559	medium	4.3/10	WordPress Payrexx Payment Gateway for WooCommerce Plugin <= 3.1.5 - Broken Access Control Vulnerability	Sep 22, 2025 9mo ago
CVE-2025-59565	medium	6.5/10	WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability	Sep 22, 2025 9mo ago
CVE-2025-53455	medium	5.9/10	WordPress CashBill.pl – Płatności WooCommerce Plugin <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability	Sep 22, 2025 9mo ago
CVE-2025-57904	medium	5.9/10	WordPress Sales Count Manager for WooCommerce plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability	Sep 22, 2025 9mo ago
CVE-2025-57903	medium	5.9/10	WordPress WooCommerce Additional Fees On Checkout (Free) plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability	Sep 22, 2025 9mo ago
CVE-2025-57905	medium	4.3/10	WordPress AgreeMe Checkboxes For WooCommerce Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 22, 2025 9mo ago
CVE-2025-57908	medium	5.9/10	WordPress Product Time Countdown for WooCommerce plugin <= 1.6.5 - Cross Site Scripting (XSS) vulnerability	Sep 22, 2025 9mo ago
CVE-2025-57914	medium	4.3/10	WordPress Deliver via Shipos for WooCommerce plugin <= 3.0.2 - Cross Site Request Forgery (CSRF) vulnerability	Sep 22, 2025 9mo ago
CVE-2025-57917	medium	4.3/10	WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.8 - Broken Access Control vulnerability	Sep 22, 2025 9mo ago
CVE-2025-57922	medium	5.3/10	WordPress Envíos Coordinadora Woocommerce plugin <= 1.1.32 - Sensitive Data Exposure vulnerability	Sep 22, 2025 9mo ago
CVE-2025-57967	medium	6.5/10	WordPress WPB Quick View for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability	Sep 22, 2025 9mo ago
CVE-2025-57972	medium	4.3/10	WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability	Sep 22, 2025 9mo ago
CVE-2025-57977	high	7.1/10	WordPress Flexible PDF Invoices for WooCommerce & WordPress Plugin <= 6.0.13 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 22, 2025 9mo ago
CVE-2025-58228	medium	6.5/10	WordPress Quick View for WooCommerce Plugin <= 2.2.16 - Cross Site Scripting (XSS) Vulnerability	Sep 22, 2025 9mo ago
CVE-2025-58247	medium	5.3/10	WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerability	Sep 22, 2025 9mo ago
CVE-2025-58656	medium	5.3/10	WordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability	Sep 22, 2025 9mo ago
CVE-2025-58686	high	8.5/10	WordPress Perfect Brands for WooCommerce plugin <= 3.6.2 - SQL Injection vulnerability	Sep 22, 2025 9mo ago
CVE-2025-58685	medium	5.3/10	WordPress Cecabank WooCommerce plugin plugin <= 0.3.4 - Broken Access Control vulnerability	Sep 22, 2025 9mo ago
CVE-2025-10142	medium	4.9/10	PagBank / PagSeguro Connect para WooCommerce <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection	Sep 10, 2025 10mo ago
CVE-2025-9463	medium	6.5/10	Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter	Sep 10, 2025 10mo ago
CVE-2025-58985	medium	6.5/10	WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability	Sep 9, 2025 10mo ago
CVE-2025-58991	high	7.1/10	WordPress WooCommerce Booking Bundle Hours Plugin <= 0.7.4 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 9, 2025 10mo ago