Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

349,464

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,091

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 841–870 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-2941	critical	9.8/10	Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move	Apr 5, 2025 1y ago
CVE-2025-2789	medium	5.3/10	MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion	Apr 5, 2025 1y ago
CVE-2025-32271	medium	4.3/10	WordPress Woocommerce Role Pricing Plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32263	medium	4.3/10	WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32241	medium	6.5/10	WordPress Official CleverReach WooCommerce Integration plugin <= 3.4.6 - CSRF to Settings Change vulnerability	Apr 4, 2025 1y ago
CVE-2025-32207	medium	6.5/10	WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32181	medium	6.5/10	WordPress Search, Filters & Merchandising for WooCommerce plugin <= 3.0.58 - Stored Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-22285	medium	6.5/10	WordPress Pallet Packaging for WooCommerce Plugin <= 1.1.15 - Broken Access Control vulnerability	Apr 4, 2025 1y ago
CVE-2025-31405	high	7.5/10	WordPress Fami WooCommerce Compare plugin <= 1.0.5 - Local File Inclusion vulnerability	Apr 4, 2025 1y ago
CVE-2024-13708	high	7.2/10	Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting	Apr 4, 2025 1y ago
CVE-2024-13744	high	8.1/10	Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload	Apr 4, 2025 1y ago
CVE-2025-31795	medium	6.5/10	WordPress Shopify to WooCommerce Migration plugin <= 1.3.0 - Settings Change vulnerability	Apr 3, 2025 1y ago
CVE-2025-31794	medium	5.4/10	WordPress WR Price List Manager For Woocommerce plugin <= 1.0.8 - Arbitrary Content Deletion vulnerability	Apr 3, 2025 1y ago
CVE-2025-31758	medium	6.5/10	WordPress Free Woocommerce Product Table View plugin <= 1.78 - Arbitrary Content Deletion vulnerability	Apr 3, 2025 1y ago
CVE-2025-31580	high	7.5/10	WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability	Apr 1, 2025 1y ago
CVE-2025-31553	critical	9.3/10	WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability	Apr 1, 2025 1y ago
CVE-2025-31089	high	8.5/10	WordPress Order Splitter for WooCommerce plugin <= 5.3.0 - SQL Injection Vulnerability	Apr 1, 2025 1y ago
CVE-2025-30906	high	7.1/10	WordPress Plugin Oficial – Getnet para WooCommerce plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability	Apr 1, 2025 1y ago
CVE-2025-30807	critical	9.3/10	WordPress Next-Cart Store to WooCommerce Migration plugin <= 3.9.4 - SQL Injection vulnerability	Apr 1, 2025 1y ago
CVE-2025-31879	medium	5.4/10	WordPress Barcode Generator for WooCommerce plugin <= 2.0.4 - Settings Change vulnerability	Apr 1, 2025 1y ago
CVE-2025-31866	medium	4.3/10	WordPress ShipDepot for WooCommerce plugin <= 1.2.19 - Broken Access Control vulnerability	Apr 1, 2025 1y ago
CVE-2025-31854	medium	4.3/10	WordPress Simple Sticky Add To Cart For WooCommerce plugin <= 1.4.9 - Broken Access Control vulnerability	Apr 1, 2025 1y ago
CVE-2025-31843	medium	4.3/10	WordPress OpenAI Tools for WordPress & WooCommerce plugin <= 2.2.1 - Broken Access Control vulnerability	Apr 1, 2025 1y ago
CVE-2025-31826	medium	5.4/10	WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Broken Access Control vulnerability	Apr 1, 2025 1y ago
CVE-2025-31807	medium	4.3/10	WordPress Product Notices for WooCommerce plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability	Apr 1, 2025 1y ago
CVE-2025-31802	medium	5.4/10	WordPress Shiptimize for WooCommerce plugin <= 3.1.86 - Settings Change vulnerability	Apr 1, 2025 1y ago
CVE-2025-31781	medium	4.3/10	WordPress Gift Cards for WooCommerce plugin <= 1.5.8 - Broken Access Control vulnerability	Apr 1, 2025 1y ago
CVE-2025-31757	medium	5.4/10	WordPress Free Woocommerce Product Table View plugin <= 1.78 - Broken Access Control vulnerability	Apr 1, 2025 1y ago
CVE-2024-13553	critical	9.8/10	SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation	Apr 1, 2025 1y ago
CVE-2024-12278	high	7.2/10	Booster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting	Apr 1, 2025 1y ago