Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

352,378

All time

Critical · Active

12,460

CVSS ≥ 9.0

New · 14 days

1,034

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1681–1710 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-35876	high	8.1/10	WordPress WooCommerce Square Plugin <= 3.8.1 is vulnerable to Insecure Direct Object References (IDOR)	Dec 20, 2023 2y ago
CVE-2023-37871	high	8.2/10	WordPress WooCommerce GoCardless Gateway Plugin <= 2.5.6 is vulnerable to Insecure Direct Object References (IDOR)	Dec 20, 2023 2y ago
CVE-2023-38478	medium	4.7/10	WordPress Integration for WooCommerce and QuickBooks Plugin <= 1.2.3 is vulnerable to Open Redirection	Dec 19, 2023 2y ago
CVE-2023-38481	medium	4.7/10	WordPress Integration for WooCommerce and Zoho CRM Plugin < 1.3.7 is vulnerable to Open Redirection	Dec 19, 2023 2y ago
CVE-2023-40602	medium	4.7/10	WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open Redirection	Dec 19, 2023 2y ago
CVE-2023-33331	high	8.5/10	WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-49761	medium	5.4/10	WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49759	medium	5.4/10	WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48778	medium	5.4/10	WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48773	medium	5.4/10	WordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48768	medium	4.3/10	WordPress Quantity Plus Minus Button for WooCommerce by CodeAstrology Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-5348	—	—	Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update	Dec 18, 2023 2y ago
CVE-2023-47789	medium	4.3/10	WordPress WooCommerce Canada Post Shipping Plugin <= 2.8.3 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-47787	medium	4.3/10	WordPress WooCommerce Bookings Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49840	medium	4.3/10	WordPress Multi Currency For WooCommerce Plugin <= 1.5.5 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49843	medium	5.4/10	WordPress First Order Discount Woocommerce Plugin <= 1.21 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49855	medium	6.5/10	WordPress BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter Plugin <= 1.49.3 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49834	medium	5.4/10	WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 17, 2023 2y ago
CVE-2023-49744	medium	5.4/10	WordPress Gift Up Gift Cards for WordPress and WooCommerce Plugin <= 2.21.3 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 15, 2023 2y ago
CVE-2023-49185	high	7.1/10	WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)	Dec 15, 2023 2y ago
CVE-2023-49828	medium	6.5/10	WordPress WooCommerce Payments Plugin <= 6.4.2 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-50369	medium	6.5/10	WordPress Alma – Pay in installments or later for WooCommerce Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-37972	medium	5.3/10	WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-48333	medium	6.5/10	WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-48742	high	7.6/10	WordPress License Manager for WooCommerce Plugin <= 2.2.10 is vulnerable to SQL Injection	Nov 30, 2023 2y ago
CVE-2023-48284	medium	4.3/10	WordPress Decorator – WooCommerce Email Customizer Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-47777	medium	6.5/10	WordPress WooCommerce and WooCommerce Blocks plugins - Auth. Cross-Site Scripting (XSS) vulnerability	Nov 30, 2023 2y ago
CVE-2023-5325	—	—	Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS	Nov 27, 2023 2y ago
CVE-2023-47244	medium	5.3/10	WordPress Email Marketing for WooCommerce by Omnisend Plugin <= 1.13.8 is vulnerable to Sensitive Data Exposure	Nov 23, 2023 2y ago
CVE-2023-40002	medium	6.5/10	WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure	Nov 22, 2023 2y ago