Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

349,530

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,089

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1831–1860 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-46864	high	7.1/10	WordPress Woocommerce Custom Checkout Fields Editor With Drag & Drop Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46822	high	7.1/10	WordPress WooCommerce JazzCash Gateway Plugin Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2023-22710	high	7.1/10	WordPress Return and Warranty Management System for WooCommerce Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2023-0537	—	—	Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS	May 8, 2023 3y ago
CVE-2023-0948	—	—	Japanized For WooCommerce < 2.5.8 - Reflected XSS	May 8, 2023 3y ago
CVE-2022-47449	high	7.1/10	WordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)	May 4, 2023 3y ago
CVE-2023-29170	medium	5.9/10	WordPress Product Enquiry for WooCommerce Plugin <= 2.2.12 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-29094	medium	5.9/10	WordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.20 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2022-46793	medium	5.4/10	WordPress Product Feed PRO for WooCommerce Plugin <= 12.4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Apr 6, 2023 3y ago
CVE-2023-0503	—	—	Free WooCommerce Theme 99fy Extension < 1.2.8 - Arbitrary Plugin Activation via CSRF	Mar 27, 2023 3y ago
CVE-2022-46843	high	7.1/10	WordPress Woocommerce Vietnam Checkout Plugin <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)	Mar 27, 2023 3y ago
CVE-2022-47173	medium	5.9/10	WordPress Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration Plugin <= 1.62.0 is vulnerable to Cross Site Scripting (XSS)	Mar 23, 2023 3y ago
CVE-2022-47589	medium	5.9/10	WordPress CTT Expresso para WooCommerce Plugin <= 3.2.11 is vulnerable to Cross Site Scripting (XSS)	Mar 23, 2023 3y ago
CVE-2023-28422	medium	5.9/10	WordPress Event Manager for WooCommerce Plugin <= 3.8.6 is vulnerable to Cross Site Scripting (XSS)	Mar 23, 2023 3y ago
CVE-2023-0865	—	—	WooCommerce Multiple Customer Addresses & Shipping < 21.7 - Arbitrary Address Creation/Deletion/Access/Update via IDOR	Mar 20, 2023 3y ago
CVE-2022-4328	—	—	WooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File Upload	Mar 6, 2023 3y ago
CVE-2023-0068	—	—	Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSS	Mar 6, 2023 3y ago
CVE-2022-47148	medium	4.3/10	WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46806	medium	5.4/10	WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46805	medium	5.4/10	WordPress Conditional Payments for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-45068	medium	4.3/10	WordPress Mercado Pago payments for WooCommerce Plugin <= 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-40198	medium	4.3/10	WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2023-0942	medium	6.1/10	Japanized For WooCommerce <= 2.5.4 - Reflected Cross-Site Scripting	Feb 21, 2023 3y ago
CVE-2022-4791	—	—	Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcode	Feb 21, 2023 3y ago
CVE-2023-0492	—	—	GS Products Slider for WooCommerce < 1.5.9 - Contributor+ Stored XSS	Feb 21, 2023 3y ago
CVE-2023-0080	—	—	Customer Reviews for WooCommerce < 5.16.0 - Contributor+ LFI	Feb 13, 2023 3y ago
CVE-2023-0166	—	—	PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS	Feb 13, 2023 3y ago
CVE-2023-0061	—	—	Judge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSS	Feb 13, 2023 3y ago
CVE-2022-4489	—	—	WOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object Injection	Feb 6, 2023 3y ago
CVE-2023-0062	—	—	EAN for WooCommerce < 4.4.3 - Contributor+ Stored XSS	Feb 6, 2023 3y ago