Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

349,530

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,089

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1921–1950 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-25649	medium	5.0/10	WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities	Aug 5, 2022 4y ago
CVE-2022-33901	medium	5.3/10	WordPress MultiSafepay plugin for WooCommerce plugin <= 4.13.1 - Unauthenticated Arbitrary File Read vulnerability	Jul 22, 2022 4y ago
CVE-2022-30998	critical	9.1/10	WordPress Homepage Product Organizer for WooCommerce plugin <= 1.1 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities	Jul 22, 2022 4y ago
CVE-2022-28666	medium	5.3/10	WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.7 - Broken Access Control vulnerability	Jul 21, 2022 4y ago
CVE-2022-2099	—	—	WooCommerce < 6.6.0 - Admin+ Stored HTML Injection	Jul 17, 2022 4y ago
CVE-2022-2092	—	—	WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting	Jul 11, 2022 4y ago
CVE-2022-1546	—	—	WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site Scripting	Jul 11, 2022 4y ago
CVE-2022-1057	—	—	Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQLi	Jul 11, 2022 4y ago
CVE-2022-1953	—	—	Product Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File Deletion	Jun 27, 2022 4y ago
CVE-2022-1916	—	—	Active Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-Scripting	Jun 27, 2022 4y ago
CVE-2022-1470	—	—	Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site Scripting	Jun 27, 2022 4y ago
CVE-2022-1532	—	—	Themify - WooCommerce Product Filter < 1.3.8 - Reflected Cross-Site Scripting	Jun 13, 2022 4y ago
CVE-2022-1673	—	—	WooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout page	Jun 6, 2022 4y ago
CVE-2022-29425	medium	6.1/10	WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability	May 20, 2022 4y ago
CVE-2022-1465	—	—	WPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site Scripting	May 16, 2022 4y ago
CVE-2022-0948	—	—	Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi	May 9, 2022 4y ago
CVE-2022-0783	—	—	Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi	May 2, 2022 4y ago
CVE-2022-0989	—	—	NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality	Apr 11, 2022 4y ago
CVE-2022-0397	—	—	WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting	Mar 28, 2022 4y ago
CVE-2021-25068	—	—	Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLi	Mar 28, 2022 4y ago
CVE-2022-0478	—	—	Event Manager for WooCommerce < 3.5.8 - Contributor+ SQL Injection	Mar 14, 2022 4y ago
CVE-2022-0399	—	—	Advanced Product Labels for WooCommerce < 1.2.3.7 - Reflected Cross-Site Scripting	Mar 14, 2022 4y ago
CVE-2021-24940	—	—	Persian Woocommerce <= 5.8.0 - Reflected Cross-Site Scripting	Mar 14, 2022 4y ago
CVE-2022-0426	—	—	Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting	Mar 7, 2022 4y ago
CVE-2022-0412	—	—	TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection	Feb 28, 2022 4y ago
CVE-2022-23982	medium	4.3/10	WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Server Information Exposure vulnerability	Feb 18, 2022 4y ago
CVE-2022-23981	medium	4.3/10	WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerability	Feb 18, 2022 4y ago
CVE-2021-25018	—	—	PPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSS	Feb 14, 2022 4y ago
CVE-2022-0149	—	—	WooCommerce – Store Exporter < 2.7.1 - Reflected Cross-Site Scripting (XSS)	Feb 7, 2022 4y ago
CVE-2021-25077	—	—	Store Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site Scripting	Feb 7, 2022 4y ago