Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

340,632

All time

Critical · Active

11,008

CVSS ≥ 9.0

New · 14 days

2,963

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1051–1080 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-10046	medium	6.1/10	افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting	Dec 7, 2024 1y ago
CVE-2024-53817	high	7.6/10	WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability	Dec 6, 2024 1y ago
CVE-2024-11687	medium	6.1/10	Next-Cart Store to WooCommerce Migration <= 3.9.2 - Reflected Cross-Site Scripting	Dec 6, 2024 1y ago
CVE-2024-11276	medium	6.1/10	PDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting	Dec 6, 2024 1y ago
CVE-2024-11324	medium	6.1/10	Accounting for WooCommerce <= 1.6.6 - Reflected Cross-Site Scripting	Dec 5, 2024 1y ago
CVE-2024-11814	medium	6.1/10	Additional Custom Order Status for WooCommerce <= 1.6.0 - Reflected Cross-Site Scripting	Dec 4, 2024 1y ago
CVE-2024-10567	high	7.5/10	TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access	Dec 4, 2024 1y ago
CVE-2024-11805	medium	6.1/10	Quick License Manager – WooCommerce Plugin <= 2.4.17 - Reflected Cross-Site Scripting	Dec 3, 2024 1y ago
CVE-2024-52460	high	7.1/10	WordPress AtaraPay WooCommerce Payment Gateway plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-52469	high	7.1/10	WordPress WooCommerce Price Alert plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53740	high	7.1/10	WordPress WooCommerce Ultimate Gift Card plugin < 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53742	high	7.1/10	WordPress Multilevel Referral Affiliate plugin for WooCommerce plugin <= 2.27 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 1, 2024 1y ago
CVE-2024-53783	high	7.6/10	WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability	Nov 30, 2024 1y ago
CVE-2024-7747	medium	6.5/10	Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types	Nov 28, 2024 1y ago
CVE-2024-9170	medium	5.5/10	Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode	Nov 26, 2024 1y ago
CVE-2024-10857	medium	6.5/10	Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read	Nov 26, 2024 1y ago
CVE-2024-11418	medium	6.1/10	Additional Order Filters for WooCommerce <= 1.21 - Reflected Cross-Site Scripting	Nov 26, 2024 1y ago
CVE-2024-10729	high	8.8/10	Booking & Appointment Plugin for WooCommerce <= 6.9.0 - Authenticated (Subscriber+) Arbitrary Option Update	Nov 26, 2024 1y ago
CVE-2024-11034	high	7.3/10	Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form	Nov 23, 2024 1y ago
CVE-2024-10519	medium	6.1/10	Wishlist for WooCommerce: Multi Wishlists Per Customer PRO 3.0.8 - 3.1.2 - Reflected Cross-Site Scripting via wtab Parameter	Nov 23, 2024 1y ago
CVE-2024-11361	medium	6.1/10	PDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting	Nov 23, 2024 1y ago
CVE-2024-10813	medium	5.3/10	Product Table for WooCommerce by CodeAstrology (wooproducttable.com) <= 3.5.1 - Information Exposure	Nov 23, 2024 1y ago
CVE-2024-11362	medium	6.1/10	Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.112.0 - Reflected Cross-Site Scripting	Nov 23, 2024 1y ago
CVE-2024-10792	medium	6.1/10	Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting	Nov 21, 2024 1y ago
CVE-2024-11370	medium	6.1/10	Subaccounts for WooCommerce <= 1.6.0 - Reflected Cross-Site Scripting	Nov 21, 2024 1y ago
CVE-2024-10365	medium	4.3/10	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates	Nov 20, 2024 1y ago
CVE-2024-10899	high	7.3/10	WooCommerce Product Table Lite <= 3.8.6 - Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting	Nov 20, 2024 1y ago
CVE-2024-9239	medium	6.1/10	Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting	Nov 20, 2024 1y ago
CVE-2024-11400	medium	6.1/10	HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter	Nov 19, 2024 1y ago
CVE-2024-52395	medium	5.3/10	WordPress Floating Buttons for WooCommerce plugin <= 2.8.8 - Broken Access Control vulnerability	Nov 19, 2024 1y ago