Feed live

WooCommerce vulnerabilities - every known CVE affecting stores and checkout

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

As the extension layer behind the majority of WordPress-powered stores, WooCommerce vulnerabilities carry extra weight when they touch checkout, payment, or customer data flows.

Total CVEs tracked

349,543

All time

Critical · Active

12,233

CVSS ≥ 9.0

New · 14 days

3,049

Newly disclosed

Feed last synced

46 mins ago

Data freshness

Showing 1981–1984 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-24262	—	—	WooLentor - WooCommerce Elementor Addons + Builder < 1.8.6 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24212	—	—	WooCommerce Help Scout < 2.9.1 - Unauthenticated Arbitrary File Upload leading to RCE	Apr 5, 2021 5y ago
CVE-2021-24171	—	—	WooCommerce Upload Files < 59.4 - Unauthenticated Arbitrary File Upload	Apr 5, 2021 5y ago
CVE-2021-24169	—	—	Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)	Apr 5, 2021 5y ago