Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

352,508

All time

Critical · Active

12,465

CVSS ≥ 9.0

New · 14 days

1,080

Newly disclosed

Feed last synced

24 mins ago

Data freshness

Showing 1951–1980 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-0948	—	—	Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi	May 9, 2022 4y ago
CVE-2022-0783	—	—	Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi	May 2, 2022 4y ago
CVE-2022-0989	—	—	NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality	Apr 11, 2022 4y ago
CVE-2022-0397	—	—	WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting	Mar 28, 2022 4y ago
CVE-2021-25068	—	—	Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLi	Mar 28, 2022 4y ago
CVE-2022-0478	—	—	Event Manager for WooCommerce < 3.5.8 - Contributor+ SQL Injection	Mar 14, 2022 4y ago
CVE-2022-0399	—	—	Advanced Product Labels for WooCommerce < 1.2.3.7 - Reflected Cross-Site Scripting	Mar 14, 2022 4y ago
CVE-2021-24940	—	—	Persian Woocommerce <= 5.8.0 - Reflected Cross-Site Scripting	Mar 14, 2022 4y ago
CVE-2022-0426	—	—	Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting	Mar 7, 2022 4y ago
CVE-2022-0412	—	—	TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection	Feb 28, 2022 4y ago
CVE-2022-23982	medium	4.3/10	WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Server Information Exposure vulnerability	Feb 18, 2022 4y ago
CVE-2022-23981	medium	4.3/10	WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerability	Feb 18, 2022 4y ago
CVE-2021-25018	—	—	PPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSS	Feb 14, 2022 4y ago
CVE-2022-0149	—	—	WooCommerce – Store Exporter < 2.7.1 - Reflected Cross-Site Scripting (XSS)	Feb 7, 2022 4y ago
CVE-2021-25077	—	—	Store Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site Scripting	Feb 7, 2022 4y ago
CVE-2021-24928	—	—	Rearrange Woocommerce Products < 3.0.8 - Subscriber+ SQL Injection	Feb 7, 2022 4y ago
CVE-2021-25085	—	—	WOOF - Products Filter for WooCommerce < 1.2.6.3 - Reflected Cross-Site Scripting	Feb 1, 2022 4y ago
CVE-2021-25062	—	—	Orders Tracking for WooCommerce < 1.1.10 - Reflected Cross-Site Scripting	Jan 24, 2022 4y ago
CVE-2021-24974	—	—	Product Feed PRO for WooCommerce < 11.0.7 - Subscriber+ Settings Update to Stored XSS	Jan 24, 2022 4y ago
CVE-2021-25001	—	—	Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds Module	Jan 3, 2022 4y ago
CVE-2021-25000	—	—	Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General Module	Jan 3, 2022 4y ago
CVE-2021-24999	—	—	Booster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing Module	Jan 3, 2022 4y ago
CVE-2021-24991	—	—	WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting	Jan 3, 2022 4y ago
CVE-2021-24849	—	—	WCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injection	Dec 21, 2021 4y ago
CVE-2021-24846	—	—	Ni WooCommerce Custom Order Status < 1.9.7 - Subscriber+ SQL Injection	Dec 21, 2021 4y ago
CVE-2021-39308	medium	6.1/10	WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting	Dec 14, 2021 4y ago
CVE-2021-39309	medium	6.1/10	Parsian Bank Gateway for Woocommerce <= 1.0 Reflected Cross-Site Scripting	Dec 14, 2021 4y ago
CVE-2021-39314	medium	6.1/10	WooCommerce EnvioPack <= 1.2 Reflected Cross-Site Scripting	Dec 14, 2021 4y ago
CVE-2021-42367	medium	6.4/10	Variation Swatches for WooCommerce <= 2.1.1 Authenticated Stored Cross-Site Scripting	Dec 14, 2021 4y ago
CVE-2021-24938	—	—	WooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site Scripting	Dec 6, 2021 4y ago