Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

340,720

All time

Critical · Active

11,011

CVSS ≥ 9.0

New · 14 days

2,882

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 1471–1500 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-1205	high	8.8/10	Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring <= 1.2.2 - Authenticated (Subscriber+) Arbitrary File Upload	Mar 20, 2024 2y ago
CVE-2024-1119	medium	5.3/10	Order Tip for WooCommerce <= 1.3.1 - Missing Authorization to Unauthenticated Data Export	Mar 20, 2024 2y ago
CVE-2024-2384	medium	4.3/10	WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure	Mar 20, 2024 2y ago
CVE-2024-2387	medium	6.1/10	Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms <= 1.82.0 - SQL Injection to Reflected Cross-Site Scripting via integration_id	Mar 20, 2024 2y ago
CVE-2024-29093	medium	4.3/10	WordPress Builder for WooCommerce reviews shortcodes – ReviewShort plugin <= 1.01.3 - Cross Site Request Forgery (CSRF) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29112	medium	5.9/10	WordPress WooCommerce Google Feed Manager plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29116	high	7.1/10	WordPress WooThumbs for WooCommerce by Iconic plugin <= 5.5.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29121	high	7.1/10	WordPress WooCommerce License Manager plugin <= 5.3.1 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-27959	high	7.1/10	WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerability	Mar 17, 2024 2y ago
CVE-2024-1857	medium	5.3/10	Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates <= 2.6.6 - Missing Authorization to Unauthenticated Information Exposure	Mar 16, 2024 2y ago
CVE-2023-51486	medium	5.4/10	WordPress WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51369	medium	4.3/10	WordPress Customize My Account for WooCommerce plugin <= 1.8.3 - Cross Site Request Forgery (CSRF) vulnerability	Mar 15, 2024 2y ago
CVE-2024-25596	medium	5.9/10	WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-1795	high	8.8/10	HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection	Mar 15, 2024 2y ago
CVE-2024-1796	medium	6.4/10	HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Mar 15, 2024 2y ago
CVE-2024-1950	high	7.5/10	Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object Injection	Mar 13, 2024 2y ago
CVE-2024-1489	medium	4.3/10	SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery	Mar 13, 2024 2y ago
CVE-2024-0683	high	7.3/10	Bulgarisation for WooCommerce <= 3.0.14 - Missing Authorization	Mar 13, 2024 2y ago
CVE-2024-1537	medium	6.4/10	Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table	Mar 13, 2024 2y ago
CVE-2024-1203	high	8.8/10	Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce <= 7.0.7 - Authenticated (Subscriber+) SQL Injection	Mar 13, 2024 2y ago
CVE-2024-1862	high	8.1/10	WooCommerce Add to Cart Custom Redirect <= 1.2.13 - Authenticated(Contributor+) Missing Authorization to Limited Arbitrary Options Update	Mar 13, 2024 2y ago
CVE-2024-1690	medium	4.3/10	TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.4.10 - Missing Authorization to Authenticated (Subscriber+) User Email Export	Mar 13, 2024 2y ago
CVE-2024-1536	high	7.4/10	Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar	Mar 13, 2024 2y ago
CVE-2024-2395	high	7.3/10	Bulgarisation for WooCommerce <= 3.0.14 - Cross-Site Request Forgery	Mar 12, 2024 2y ago
CVE-2024-1986	high	8.8/10	Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload	Mar 7, 2024 2y ago
CVE-2024-1773	high	8.8/10	PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection	Mar 7, 2024 2y ago
CVE-2024-1534	medium	6.4/10	Booster for WooCommerce <= 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde	Mar 7, 2024 2y ago
CVE-2024-1088	medium	5.3/10	Password Protected Store for WooCommerce <= 2.2 - Information Exposure via REST API	Mar 5, 2024 2y ago
CVE-2024-1120	medium	5.3/10	NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure	Mar 1, 2024 2y ago
CVE-2023-6090	critical	9.1/10	WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload	Feb 29, 2024 2y ago