Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

340,046

All time

Critical · Active

10,882

CVSS ≥ 9.0

New · 14 days

2,595

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 631–660 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-4336	high	8.1/10	eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()	May 24, 2025 1y ago
CVE-2025-4602	medium	5.9/10	eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Read	May 24, 2025 1y ago
CVE-2025-31397	critical	9.3/10	WordPress Bus Ticket Booking with Seat Reservation for WooCommerce plugin <= 1.7 - SQL Injection vulnerability	May 23, 2025 1y ago
CVE-2025-47461	high	8.8/10	WordPress Subaccounts for WooCommerce plugin <= 1.6.6 - Account Takeover vulnerability	May 23, 2025 1y ago
CVE-2025-47532	critical	9.8/10	WordPress CoinPayments.net Payment Gateway for WooCommerce plugin <= 1.0.17 - PHP Object Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-47641	critical	10.0/10	WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.3.9 - Arbitrary File Upload Vulnerability	May 23, 2025 1y ago
CVE-2025-47640	critical	9.3/10	WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.0 - SQL Injection Vulnerability	May 23, 2025 1y ago
CVE-2025-47687	critical	10.0/10	WordPress StoreKeeper for WooCommerce plugin <= 14.4.4 - Arbitrary File Upload Vulnerability	May 23, 2025 1y ago
CVE-2025-5062	medium	6.1/10	WooCommerce <= 9.4.2 - PostMessage-Based Cross-Site Scripting	May 22, 2025 1y ago
CVE-2025-2929	—	—	Order Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS	May 20, 2025 1y ago
CVE-2025-39446	high	7.1/10	WordPress Booster Plus for WooCommerce plugin <= 7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability	May 19, 2025 1y ago
CVE-2025-43838	medium	6.5/10	WordPress Custom PC Builder Lite for WooCommerce <= 1.0.1 - Settings Change Vulnerability	May 19, 2025 1y ago
CVE-2025-47577	critical	10.0/10	WordPress TI WooCommerce Wishlist plugin <= 2.9.2 - Arbitrary File Upload Vulnerability	May 19, 2025 1y ago
CVE-2025-39364	high	7.5/10	WordPress Product Category Slider for WooCommerce plugin <= 4.3.4 - Local File Inclusion vulnerability	May 19, 2025 1y ago
CVE-2025-32920	medium	6.5/10	WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Cross Site Scripting (XSS) vulnerability	May 19, 2025 1y ago
CVE-2025-48342	medium	5.4/10	WordPress Dynamic Pricing & Discounts Lite for WooCommerce plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) vulnerability	May 19, 2025 1y ago
CVE-2025-48284	medium	5.4/10	WordPress Japanized For WooCommerce plugin <= 2.6.40 - Cross Site Request Forgery (CSRF) Vulnerability	May 19, 2025 1y ago
CVE-2025-48268	medium	4.3/10	WordPress Bot for Telegram on WooCommerce plugin <= 1.2.6 - Broken Access Control Vulnerability	May 19, 2025 1y ago
CVE-2025-48266	medium	6.5/10	WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.8 - Cross Site Scripting (XSS) Vulnerability	May 19, 2025 1y ago
CVE-2025-48265	medium	4.3/10	WordPress Year Make Model Search for WooCommerce plugin <= 1.0.11 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	May 19, 2025 1y ago
CVE-2025-48264	medium	4.3/10	WordPress Product Code for WooCommerce plugin <= 1.5.0 - CSRF to Database Update vulnerability	May 19, 2025 1y ago
CVE-2025-48254	medium	6.5/10	WordPress Change Add to Cart Button Text for WooCommerce plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability	May 19, 2025 1y ago
CVE-2025-48253	medium	6.5/10	WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.6 - Cross Site Scripting (XSS) Vulnerability	May 19, 2025 1y ago
CVE-2025-48251	medium	6.5/10	WordPress Additional Custom Emails & Recipients for WooCommerce plugin <= 3.5.1 - Cross Site Scripting (XSS) Vulnerability	May 19, 2025 1y ago
CVE-2025-48250	medium	6.5/10	WordPress Coupons & Add to Cart by URL Links for WooCommerce plugin <= 1.7.7 - Cross Site Scripting (XSS) Vulnerability	May 19, 2025 1y ago
CVE-2025-48249	medium	6.5/10	WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) Vulnerability	May 19, 2025 1y ago
CVE-2025-48248	medium	6.5/10	WordPress Sitewide Discount for WooCommerce: Apply Discount to All Products plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability	May 19, 2025 1y ago
CVE-2025-48240	medium	6.5/10	WordPress Cost of Goods for WooCommerce plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability	May 19, 2025 1y ago
CVE-2025-48239	medium	6.5/10	WordPress Product Notes Tab & Private Admin Notes for WooCommerce plugin <= 3.1.0 - Cross Site Scripting (XSS) Vulnerability	May 19, 2025 1y ago
CVE-2025-48237	medium	6.5/10	WordPress Wishlist for WooCommerce plugin <= 3.2.2 - Cross Site Scripting (XSS) Vulnerability	May 19, 2025 1y ago