Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

352,490

All time

Critical · Active

12,463

CVSS ≥ 9.0

New · 14 days

1,071

Newly disclosed

Feed last synced

42 mins ago

Data freshness

Showing 1891–1920 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-4227	—	—	Booster for WooCommerce - Reflected Cross-Site Scripting	Dec 26, 2022 3y ago
CVE-2022-4106	—	—	Wholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File Download	Dec 19, 2022 3y ago
CVE-2022-4107	—	—	SMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File Download	Dec 19, 2022 3y ago
CVE-2022-4108	—	—	Wholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File Download	Dec 19, 2022 3y ago
CVE-2022-4016	—	—	Booster for WooCommerce - Custom Role Creation/Deletion via CSRF	Dec 12, 2022 3y ago
CVE-2022-4000	—	—	WooCommerce Shipping - DPD baltic < 1.2.11 - Admin+ Stored XSS	Dec 12, 2022 3y ago
CVE-2022-3999	—	—	WooCommerce Shipping - DPD baltic < 1.2.57 - Subscriber+ Arbitrary Options Deletion	Dec 12, 2022 3y ago
CVE-2022-45359	critical	9.8/10	WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload	Dec 6, 2022 3y ago
CVE-2022-3995	medium	4.3/10	TeraWallet – For WooCommerce <= 1.4.3 - Insecure Direct Object Reference	Nov 29, 2022 3y ago
CVE-2022-3603	—	—	Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection	Nov 28, 2022 3y ago
CVE-2022-3490	—	—	Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection	Nov 28, 2022 3y ago
CVE-2022-3763	—	—	Booster for WooCommerce - Checkout Files Deletion via CSRF	Nov 21, 2022 3y ago
CVE-2022-3762	—	—	Booster for WooCommerce - ShopManager+ Arbitrary File Download	Nov 21, 2022 3y ago
CVE-2022-41655	medium	4.3/10	WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerability	Nov 18, 2022 3y ago
CVE-2022-41685	medium	5.4/10	Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Integration for Szamlazz.hu & WooCommerce and Csomagpontok és szállítási címkék WooCommerce hez plugins	Nov 18, 2022 3y ago
CVE-2022-44634	medium	4.9/10	WordPress S2W – Import Shopify to WooCommerce plugin <= 1.1.12 - Auth. Arbitrary File Read vulnerability	Nov 18, 2022 3y ago
CVE-2022-43463	medium	4.8/10	WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.9 - Auth. Stored Cross-Site Scripting (XSS) vulnerability	Nov 18, 2022 3y ago
CVE-2022-41805	medium	5.4/10	WordPress Booster for WooCommerce plugin <= 5.6.6 - Cross-Site Request Forgery (CSRF) vulnerability	Nov 18, 2022 3y ago
CVE-2022-45066	medium	5.4/10	WordPress WooSwipe WooCommerce Gallery plugin <= 2.0.1 - Auth. Broken Access Control vulnerability	Nov 17, 2022 3y ago
CVE-2022-43488	medium	5.4/10	WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability	Nov 9, 2022 3y ago
CVE-2022-40128	medium	4.3/10	WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability	Nov 8, 2022 3y ago
CVE-2022-43481	medium	5.4/10	WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.5 - Cross-Site Request Forgery (CSRF) vulnerability	Nov 8, 2022 3y ago
CVE-2022-43491	medium	5.4/10	WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability	Nov 8, 2022 3y ago
CVE-2022-3537	—	—	Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload	Nov 7, 2022 3y ago
CVE-2022-3536	—	—	Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization	Nov 7, 2022 3y ago
CVE-2022-3481	—	—	WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi	Nov 7, 2022 3y ago
CVE-2022-3335	—	—	Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection	Oct 25, 2022 3y ago
CVE-2022-41623	high	7.5/10	WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability	Oct 14, 2022 3y ago
CVE-2022-38134	medium	4.3/10	WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability	Sep 23, 2022 4y ago
CVE-2022-38470	medium	4.3/10	WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) vulnerability	Sep 23, 2022 4y ago