Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

352,478

All time

Critical · Active

12,462

CVSS ≥ 9.0

New · 14 days

1,062

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1861–1890 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-4328	—	—	WooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File Upload	Mar 6, 2023 3y ago
CVE-2023-0068	—	—	Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSS	Mar 6, 2023 3y ago
CVE-2022-47148	medium	4.3/10	WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46806	medium	5.4/10	WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46805	medium	5.4/10	WordPress Conditional Payments for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-45068	medium	4.3/10	WordPress Mercado Pago payments for WooCommerce Plugin <= 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-40198	medium	4.3/10	WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2023-0942	medium	6.1/10	Japanized For WooCommerce <= 2.5.4 - Reflected Cross-Site Scripting	Feb 21, 2023 3y ago
CVE-2022-4791	—	—	Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcode	Feb 21, 2023 3y ago
CVE-2023-0492	—	—	GS Products Slider for WooCommerce < 1.5.9 - Contributor+ Stored XSS	Feb 21, 2023 3y ago
CVE-2023-0080	—	—	Customer Reviews for WooCommerce < 5.16.0 - Contributor+ LFI	Feb 13, 2023 3y ago
CVE-2023-0166	—	—	PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS	Feb 13, 2023 3y ago
CVE-2023-0061	—	—	Judge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSS	Feb 13, 2023 3y ago
CVE-2022-4489	—	—	WOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object Injection	Feb 6, 2023 3y ago
CVE-2023-0062	—	—	EAN for WooCommerce < 4.4.3 - Contributor+ Stored XSS	Feb 6, 2023 3y ago
CVE-2023-0144	—	—	Event Manager and Tickets Selling Plugin for WooCommerce < 3.8.0 - Contributor+ Stored XSS	Feb 6, 2023 3y ago
CVE-2022-29416	medium	4.7/10	WordPress Afterpay Gateway for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)	Feb 6, 2023 3y ago
CVE-2022-46815	medium	5.4/10	WordPress Conditional Shipping for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-36401	medium	5.4/10	WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-4395	—	—	Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload	Jan 30, 2023 3y ago
CVE-2022-4872	—	—	WooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no'	Jan 30, 2023 3y ago
CVE-2022-4017	—	—	Booster for WooCommerce - Multiple CSRF	Jan 23, 2023 3y ago
CVE-2022-4629	—	—	Product Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in Shortcode	Jan 23, 2023 3y ago
CVE-2022-4547	—	—	Conditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLi	Jan 16, 2023 3y ago
CVE-2022-4426	—	—	Mautic Integration For WooCommerce < 1.0.3 - Arbitrary Options Update via CSRF	Jan 9, 2023 3y ago
CVE-2022-3923	—	—	ActiveCampaign for WooCommerce < 1.9.8 - Subscriber+ Error Log Cleanup	Jan 9, 2023 3y ago
CVE-2022-3860	—	—	Visual Email Designer for WooCommerce < 1.7.2 - Multiple Author+ SQLi	Jan 2, 2023 3y ago
CVE-2022-4329	—	—	Product list Widget for Woocommerce <= 1.0 - Reflected XSS	Jan 2, 2023 3y ago
CVE-2022-4109	—	—	Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download	Jan 2, 2023 3y ago
CVE-2022-4047	—	—	Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload	Dec 26, 2022 3y ago