Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

340,632

All time

Critical · Active

11,008

CVSS ≥ 9.0

New · 14 days

2,967

Newly disclosed

Feed last synced

40 mins ago

Data freshness

Showing 1021–1050 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-36506	medium	5.3/10	WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-34376	medium	5.4/10	WordPress Change WooCommerce Add To Cart Button Text plugin <= 1.3 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-32963	medium	5.3/10	WordPress Predictive Search for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2022-47182	medium	5.3/10	WordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access Control	Dec 13, 2024 1y ago
CVE-2022-47168	medium	4.3/10	WordPress Printful Integration for WooCommerce plugin <= 2.2.3 - Cross Site Request Forgery (CSRF)	Dec 13, 2024 1y ago
CVE-2022-46811	medium	4.3/10	WordPress ALD Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 1.0.21 - Broken Access Control + CSRF	Dec 13, 2024 1y ago
CVE-2022-46807	medium	4.3/10	WordPress Stock Sync for WooCommerce plugin <= 2.3.2 - Broken Access Control	Dec 13, 2024 1y ago
CVE-2022-46795	medium	6.5/10	WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability	Dec 13, 2024 1y ago
CVE-2024-11911	medium	4.3/10	WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation	Dec 13, 2024 1y ago
CVE-2024-12421	medium	6.5/10	Coupon Affiliates – Affiliate Plugin for WooCommerce <= 5.16.7.1 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting	Dec 13, 2024 1y ago
CVE-2024-11809	medium	6.1/10	Primer MyData for Woocommerce <= 4.2.1 - Reflected Cross-Site Scripting	Dec 13, 2024 1y ago
CVE-2024-12160	medium	6.1/10	Seraphinite Bulk Discounts for WooCommerce <= 2.4.6 - Reflected Cross-Site Scripting	Dec 12, 2024 1y ago
CVE-2024-11727	medium	4.4/10	NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting	Dec 12, 2024 1y ago
CVE-2024-12265	medium	5.3/10	Web3 Cryptocurrency Payments by DePay for WooCommerce <= 2.12.17 - Missing Authorization to Information Exposure	Dec 12, 2024 1y ago
CVE-2024-10124	critical	9.8/10	Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation	Dec 12, 2024 1y ago
CVE-2024-12040	high	8.8/10	Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion via 'theme'	Dec 12, 2024 1y ago
CVE-2024-12004	medium	6.1/10	WPC Order Notes for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting	Dec 11, 2024 1y ago
CVE-2024-10959	high	7.3/10	Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth	Dec 10, 2024 1y ago
CVE-2024-54227	medium	4.3/10	WordPress Minimum and Maximum Quantity for WooCommerce plugin <= 2.0.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-25026	medium	4.3/10	WordPress PayPal Brasil para WooCommerce plugin <= 1.4.2 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-30479	medium	5.3/10	WordPress Stamped.io Product Reviews & UGC for WooCommerce plugin <= 2.3.2 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-30783	medium	4.3/10	WordPress Smart WooCommerce Search plugin <= 2.5.0 - Broken Access Control	Dec 9, 2024 1y ago
CVE-2023-32299	medium	6.5/10	WordPress Ni WooCommerce Sales Report plugin <= 3.7.3 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47694	medium	5.4/10	WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47698	high	8.6/10	WordPress Japanized For WooCommerce plugin <= 2.6.4 - Multiple Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-49194	medium	5.3/10	WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability	Dec 9, 2024 1y ago
CVE-2023-49817	high	8.2/10	WordPress Flexible Woocommerce Checkout Field Editor plugin <= 2.0.1 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-50899	medium	5.4/10	WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 5.0.2 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-51357	medium	5.3/10	WordPress Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce plugin <= 6.5.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2024-12257	medium	6.1/10	CardGate Payments for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting	Dec 7, 2024 1y ago