Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

349,530

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,089

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1891–1920 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-44634	medium	4.9/10	WordPress S2W – Import Shopify to WooCommerce plugin <= 1.1.12 - Auth. Arbitrary File Read vulnerability	Nov 18, 2022 3y ago
CVE-2022-43463	medium	4.8/10	WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.9 - Auth. Stored Cross-Site Scripting (XSS) vulnerability	Nov 18, 2022 3y ago
CVE-2022-41805	medium	5.4/10	WordPress Booster for WooCommerce plugin <= 5.6.6 - Cross-Site Request Forgery (CSRF) vulnerability	Nov 18, 2022 3y ago
CVE-2022-45066	medium	5.4/10	WordPress WooSwipe WooCommerce Gallery plugin <= 2.0.1 - Auth. Broken Access Control vulnerability	Nov 17, 2022 3y ago
CVE-2022-43488	medium	5.4/10	WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability	Nov 9, 2022 3y ago
CVE-2022-40128	medium	4.3/10	WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability	Nov 8, 2022 3y ago
CVE-2022-43481	medium	5.4/10	WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.5 - Cross-Site Request Forgery (CSRF) vulnerability	Nov 8, 2022 3y ago
CVE-2022-43491	medium	5.4/10	WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability	Nov 8, 2022 3y ago
CVE-2022-3537	—	—	Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload	Nov 7, 2022 3y ago
CVE-2022-3536	—	—	Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization	Nov 7, 2022 3y ago
CVE-2022-3481	—	—	WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi	Nov 7, 2022 3y ago
CVE-2022-3335	—	—	Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection	Oct 25, 2022 3y ago
CVE-2022-41623	high	7.5/10	WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability	Oct 14, 2022 3y ago
CVE-2022-38134	medium	4.3/10	WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability	Sep 23, 2022 3y ago
CVE-2022-38470	medium	4.3/10	WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) vulnerability	Sep 23, 2022 3y ago
CVE-2022-40194	medium	5.3/10	WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Sensitive Information Disclosure vulnerability	Sep 23, 2022 3y ago
CVE-2022-38095	medium	5.4/10	WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability	Sep 23, 2022 3y ago
CVE-2022-2575	—	—	WBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSS	Sep 16, 2022 3y ago
CVE-2022-35275	medium	4.8/10	WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability	Sep 9, 2022 3y ago
CVE-2022-2518	high	8.8/10	Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting	Sep 6, 2022 3y ago
CVE-2022-2429	medium	6.5/10	Ultimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection	Sep 6, 2022 3y ago
CVE-2022-2657	—	—	Multivendor Marketplace Solution for WooCommerce < 3.8.12 - Unauthorised AJAX Calls	Sep 5, 2022 3y ago
CVE-2022-2556	—	—	MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF	Aug 29, 2022 4y ago
CVE-2022-2537	—	—	WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting	Aug 29, 2022 4y ago
CVE-2022-2267	—	—	MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF	Aug 29, 2022 4y ago
CVE-2022-36379	high	8.8/10	WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update	Aug 23, 2022 4y ago
CVE-2022-34868	high	8.8/10	WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Authenticated Arbitrary Settings Update vulnerability	Aug 23, 2022 4y ago
CVE-2022-2555	—	—	Yotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRF	Aug 22, 2022 4y ago
CVE-2022-2382	—	—	Product Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options Deletion	Aug 22, 2022 4y ago
CVE-2022-36284	medium	6.4/10	WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change	Aug 5, 2022 4y ago