Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

352,505

All time

Critical · Active

12,465

CVSS ≥ 9.0

New · 14 days

1,079

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1921–1950 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-40194	medium	5.3/10	WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Sensitive Information Disclosure vulnerability	Sep 23, 2022 4y ago
CVE-2022-38095	medium	5.4/10	WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability	Sep 23, 2022 4y ago
CVE-2022-2575	—	—	WBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSS	Sep 16, 2022 4y ago
CVE-2022-35275	medium	4.8/10	WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability	Sep 9, 2022 4y ago
CVE-2022-2518	high	8.8/10	Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting	Sep 6, 2022 4y ago
CVE-2022-2429	medium	6.5/10	Ultimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection	Sep 6, 2022 4y ago
CVE-2022-2657	—	—	Multivendor Marketplace Solution for WooCommerce < 3.8.12 - Unauthorised AJAX Calls	Sep 5, 2022 4y ago
CVE-2022-2556	—	—	MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF	Aug 29, 2022 4y ago
CVE-2022-2537	—	—	WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting	Aug 29, 2022 4y ago
CVE-2022-2267	—	—	MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF	Aug 29, 2022 4y ago
CVE-2022-36379	high	8.8/10	WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update	Aug 23, 2022 4y ago
CVE-2022-34868	high	8.8/10	WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Authenticated Arbitrary Settings Update vulnerability	Aug 23, 2022 4y ago
CVE-2022-2555	—	—	Yotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRF	Aug 22, 2022 4y ago
CVE-2022-2382	—	—	Product Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options Deletion	Aug 22, 2022 4y ago
CVE-2022-36284	medium	6.4/10	WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change	Aug 5, 2022 4y ago
CVE-2022-25649	medium	5.0/10	WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities	Aug 5, 2022 4y ago
CVE-2022-33901	medium	5.3/10	WordPress MultiSafepay plugin for WooCommerce plugin <= 4.13.1 - Unauthenticated Arbitrary File Read vulnerability	Jul 22, 2022 4y ago
CVE-2022-30998	critical	9.1/10	WordPress Homepage Product Organizer for WooCommerce plugin <= 1.1 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities	Jul 22, 2022 4y ago
CVE-2022-28666	medium	5.3/10	WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.7 - Broken Access Control vulnerability	Jul 21, 2022 4y ago
CVE-2022-2099	—	—	WooCommerce < 6.6.0 - Admin+ Stored HTML Injection	Jul 17, 2022 4y ago
CVE-2022-2092	—	—	WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting	Jul 11, 2022 4y ago
CVE-2022-1546	—	—	WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site Scripting	Jul 11, 2022 4y ago
CVE-2022-1057	—	—	Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQLi	Jul 11, 2022 4y ago
CVE-2022-1953	—	—	Product Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File Deletion	Jun 27, 2022 4y ago
CVE-2022-1916	—	—	Active Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-Scripting	Jun 27, 2022 4y ago
CVE-2022-1470	—	—	Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site Scripting	Jun 27, 2022 4y ago
CVE-2022-1532	—	—	Themify - WooCommerce Product Filter < 1.3.8 - Reflected Cross-Site Scripting	Jun 13, 2022 4y ago
CVE-2022-1673	—	—	WooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout page	Jun 6, 2022 4y ago
CVE-2022-29425	medium	6.1/10	WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability	May 20, 2022 4y ago
CVE-2022-1465	—	—	WPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site Scripting	May 16, 2022 4y ago