Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

340,486

All time

Critical · Active

11,003

CVSS ≥ 9.0

New · 14 days

2,930

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 751–780 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-32209	medium	6.5/10	WordPress Total processing card payments for WooCommerce Plugin <= 7.1.5 - Arbitrary File Download vulnerability	Apr 10, 2025 1y ago
CVE-2025-32119	high	8.2/10	WordPress CardGate Payments for WooCommerce plugin <= 3.2.1 - SQL Injection vulnerability	Apr 10, 2025 1y ago
CVE-2025-32687	high	8.5/10	WordPress Review Stars Count For WooCommerce plugin <= 2.0 - SQL Injection Vulnerability	Apr 10, 2025 1y ago
CVE-2025-2719	medium	6.5/10	Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update	Apr 10, 2025 1y ago
CVE-2025-26888	medium	5.3/10	WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerability	Apr 9, 2025 1y ago
CVE-2025-31032	high	7.1/10	WordPress Pagopar – WooCommerce Gateway plugin <= 2.7.1 - CSRF to Stored XSS vulnerability	Apr 9, 2025 1y ago
CVE-2025-32570	high	7.1/10	WordPress ChillPay WooCommerce Plugin <= 2.5.3 - CSRF to Stored XSS vulnerability	Apr 9, 2025 1y ago
CVE-2025-32659	high	7.1/10	WordPress FraudLabs Pro for WooCommerce plugin <= 2.22.8 - CSRF to Stored XSS vulnerability	Apr 9, 2025 1y ago
CVE-2025-2568	medium	5.3/10	Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce 1.0.4 - 1.2.1 - Missing Authorization to Unauthenticated Limited Arbitrary Options Update	Apr 8, 2025 1y ago
CVE-2025-2941	critical	9.8/10	Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move	Apr 5, 2025 1y ago
CVE-2025-2789	medium	5.3/10	MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion	Apr 5, 2025 1y ago
CVE-2025-32271	medium	4.3/10	WordPress Woocommerce Role Pricing Plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32263	medium	4.3/10	WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32241	medium	6.5/10	WordPress Official CleverReach WooCommerce Integration plugin <= 3.4.6 - CSRF to Settings Change vulnerability	Apr 4, 2025 1y ago
CVE-2025-32207	medium	6.5/10	WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32181	medium	6.5/10	WordPress Search, Filters & Merchandising for WooCommerce plugin <= 3.0.58 - Stored Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-22285	medium	6.5/10	WordPress Pallet Packaging for WooCommerce Plugin <= 1.1.15 - Broken Access Control vulnerability	Apr 4, 2025 1y ago
CVE-2025-31405	high	7.5/10	WordPress Fami WooCommerce Compare plugin <= 1.0.5 - Local File Inclusion vulnerability	Apr 4, 2025 1y ago
CVE-2024-13708	high	7.2/10	Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting	Apr 4, 2025 1y ago
CVE-2024-13744	high	8.1/10	Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload	Apr 4, 2025 1y ago
CVE-2025-31795	medium	6.5/10	WordPress Shopify to WooCommerce Migration plugin <= 1.3.0 - Settings Change vulnerability	Apr 3, 2025 1y ago
CVE-2025-31794	medium	5.4/10	WordPress WR Price List Manager For Woocommerce plugin <= 1.0.8 - Arbitrary Content Deletion vulnerability	Apr 3, 2025 1y ago
CVE-2025-31758	medium	6.5/10	WordPress Free Woocommerce Product Table View plugin <= 1.78 - Arbitrary Content Deletion vulnerability	Apr 3, 2025 1y ago
CVE-2025-31580	high	7.5/10	WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability	Apr 1, 2025 1y ago
CVE-2025-31553	critical	9.3/10	WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability	Apr 1, 2025 1y ago
CVE-2025-31089	high	8.5/10	WordPress Order Splitter for WooCommerce plugin <= 5.3.0 - SQL Injection Vulnerability	Apr 1, 2025 1y ago
CVE-2025-30906	high	7.1/10	WordPress Plugin Oficial – Getnet para WooCommerce plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability	Apr 1, 2025 1y ago
CVE-2025-30807	critical	9.3/10	WordPress Next-Cart Store to WooCommerce Migration plugin <= 3.9.4 - SQL Injection vulnerability	Apr 1, 2025 1y ago
CVE-2025-31879	medium	5.4/10	WordPress Barcode Generator for WooCommerce plugin <= 2.0.4 - Settings Change vulnerability	Apr 1, 2025 1y ago
CVE-2025-31866	medium	4.3/10	WordPress ShipDepot for WooCommerce plugin <= 1.2.19 - Broken Access Control vulnerability	Apr 1, 2025 1y ago