Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

349,466

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,088

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1351–1380 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-52227	medium	4.3/10	WordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerability	Jun 11, 2024 2y ago
CVE-2023-52224	medium	4.3/10	WordPress Revolut Gateway for WooCommerce plugin <= 4.9.7 - Broken Access Control vulnerability	Jun 11, 2024 2y ago
CVE-2024-34819	medium	5.3/10	WordPress MC Woocommerce Wishlist plugin <= 1.7.2 - Broken Access Control vulnerability	Jun 11, 2024 2y ago
CVE-2023-51498	medium	5.3/10	WordPress WooCommerce Canada Post Shipping plugin <= 2.8.3 - Broken Access Control vulnerability	Jun 11, 2024 2y ago
CVE-2024-5189	medium	6.4/10	Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting	Jun 11, 2024 2y ago
CVE-2023-52179	medium	5.4/10	WordPress Product Expiry for WooCommerce plugin <= 2.5 - Broken Access Control vulnerability	Jun 11, 2024 2y ago
CVE-2024-34813	medium	5.3/10	WordPress WooCommerce Wishlist plugin <= 1.7.8 - Broken Access Control vulnerability	Jun 11, 2024 2y ago
CVE-2023-52217	medium	4.3/10	WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability	Jun 11, 2024 2y ago
CVE-2023-52186	medium	5.3/10	WordPress WooCommerce Product Vendors plugin <= 2.2.2 - Unauthenticated Broken Access Control vulnerability	Jun 11, 2024 2y ago
CVE-2024-5530	medium	6.4/10	ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget	Jun 11, 2024 2y ago
CVE-2024-35728	medium	5.3/10	WordPress Product Addons & Fields for WooCommerce plugin <= 32.0.20 - Content Injection vulnerability	Jun 10, 2024 2y ago
CVE-2024-35680	medium	5.3/10	WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability	Jun 10, 2024 2y ago
CVE-2024-35658	high	8.6/10	WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability	Jun 10, 2024 2y ago
CVE-2024-35724	medium	4.3/10	WordPress Bosa Elementor Addons and Templates for WooCommerce plugin <= 1.0.12 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35727	medium	4.3/10	WordPress Extra Product Options for WooCommerce plugin <= 3.0.6 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35748	medium	5.3/10	WordPress WooCommerce Dropshipping plugin <= 5.0.4 - Unauthenticated Arbitrary Email Sending vulnerability	Jun 9, 2024 2y ago
CVE-2024-35662	medium	5.4/10	WordPress Simple COD Fees for WooCommerce plugin <= 2.0.2 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31276	medium	5.3/10	WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31283	high	7.5/10	WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31359	medium	4.3/10	WordPress Premmerce Product Filter for WooCommerce plugin <= 3.7.2 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-32811	medium	5.3/10	WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability	Jun 9, 2024 2y ago
CVE-2024-32814	medium	5.3/10	WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31267	medium	4.3/10	WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-30470	medium	6.5/10	WordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-30466	medium	5.4/10	WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.4 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-25929	medium	6.5/10	WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2023-34003	medium	6.5/10	WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability	Jun 9, 2024 2y ago
CVE-2023-51494	medium	5.3/10	WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2023-52230	medium	6.5/10	WordPress Booster Plus for WooCommerce plugin < 7.1.3 - Authenticated Arbitrary WordPress Option Disclosure Vulnerability	Jun 9, 2024 2y ago
CVE-2023-52232	medium	6.5/10	WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability	Jun 9, 2024 2y ago