Skip to contentUnknown Woocommerce vulnerabilities
- unknown pricing deals for woocommercePricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQLiCVE-2022-10579.8 Critical
- mklacroix product configurator for woocommerce, product configurator for woocommerce project configurator for woocommerce +1 moreProduct Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File DeletionCVE-2022-19539.1 Critical
- realmag777 active products tables for woocommerce. professional products tables for woocommerce store, pluginus woot +1 moreActive Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-ScriptingCVE-2022-19166.1 Medium
- ultimate woocommerce csv importer project woocommerce csv importer, unknown ultimate woocommerce csv importer +1 moreUltimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site ScriptingCVE-2022-14706.1 Medium
- themify woocommerce product filter, unknown themify – woocommerce product filter +1 moreThemify - WooCommerce Product Filter < 1.3.8 - Reflected Cross-Site ScriptingCVE-2022-15326.1 Medium
- greenwallet woocommerce green wallet gatewayWooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout pageCVE-2022-16736.1 Medium
- fibosearch, damian-gora fibosearch – ajax search for woocommerce +1 moreFiboSearch < 1.18.0 - Admin+ Stored Cross-Site ScriptingCVE-2022-14694.8 Medium
- unknown wpc smart wishlist for woocommerceWPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site ScriptingCVE-2022-14656.1 Medium
- pluginbazaar order listener for woocommerce, unknown order listener for woocommerce – play sounds instantly on new orders +1 moreOrder Listener for WooCommerce < 3.2.2 - Unauthenticated SQLiCVE-2022-09489.8 Critical
- ubigeo de peru para woocommerce project de peru para woocommerce, unknown ubigeo de perú para woocommerce y wordpress +1 moreUbigeo de Peru < 3.6.4 - Unauthenticated SQLiCVE-2022-08149.8 Critical
- unknown multiple shipping address woocommerce, themehigh multiple shipping addresses for woocommerce +1 moreMultiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLiCVE-2022-07839.8 Critical
- codeastrology woo product table, unknown product table for woocommerce (wooproducttable) +1 moreWoo Product Table < 3.1.2 - Unauthenticated Arbitrary Function CallCVE-2022-1020EPSS 25.9%9.8 Critical
- unknown ns woocommerce watermark, nsthemes ns watermark for woocommerce +1 moreNS WooCommerce Watermark <= 2.11.3 - Abuse of FunctionalityCVE-2022-09897.5 High
- yithemes woocommerce affiliate, elliot sowersby, relywp woocommerce affiliate plugin – coupon affiliates +1 moreCoupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSSCVE-2022-08186.1 Medium
- unknown wpc smart wishlist for woocommerceWPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site ScriptingCVE-2022-03975.4 Medium
- dpl sync woocommerce product feed to google shoppingSync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLiCVE-2021-250687.2 High
- mage-people event manager and tickets selling for woocommerce, unknown event manager and tickets selling plugin for woocommerce +1 moreEvent Manager for WooCommerce < 3.5.8 - Contributor+ SQL InjectionCVE-2022-04788.8 High
- berocket advanced product labels for woocommerceAdvanced Product Labels for WooCommerce < 1.2.3.7 - Reflected Cross-Site ScriptingCVE-2022-03996.1 Medium
- adtribes product feed pro for woocommerceProduct Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site ScriptingCVE-2022-04265.4 Medium
- wpdeveloper notificationx, unknown notificationx – best fomo, social proof, woocommerce sales popup & notification bar plugin with elementor +1 moreNotificationX < 2.3.9 - Unauthenticated Blind SQL InjectionCVE-2022-0349EPSS 34.4%9.8 Critical
- conversios, unknown conversios.io – google analytics and google shopping plugin for woocommerce +1 moreConversios.io < 4.6.2 - Subscriber+ SQL InjectionCVE-2021-249528.8 High
- pluginus woocs, unknown woocs – currency switcher for woocommerce. professional and free multi currency plugin – pay in selected currency +1 moreWOOCS < 1.3.7.5 - Reflected Cross-Site ScriptingCVE-2022-02346.1 Medium
- exportfeed, unknown exportfeed: list woocommerce products on ebay store +1 moreExportFeed <= 2.0.1.0 - Admin+ SQL InjectionCVE-2021-42087.2 High
- access-keys wp popup banners, accesspress themes accessbuddy, basic +141 more +143 moreBackdoored Plugins & Themes from AccessPress ThemesCVE-2021-24867EPSS 18.0%9.8 Critical
- najeebmedia ppom for woocommercePPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSSCVE-2021-250185.4 Medium
- josh kohlbach woocommerce – store exporter, visser store exporter for woocommerce +1 moreWooCommerce – Store Exporter < 2.7.1 - Reflected Cross-Site Scripting (XSS)CVE-2022-01496.1 Medium
- unknown store toolkit for woocommerceStore Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site ScriptingCVE-2021-250776.1 Medium
- rearrange woocommerce products project woocommerce products, unknown rearrange woocommerce products +1 moreRearrange Woocommerce Products < 3.0.8 - Subscriber+ SQL InjectionCVE-2021-249286.5 Medium
- pluginus woocommerce products filter, unknown woof – products filter for woocommerce +1 moreWOOF - Products Filter for WooCommerce < 1.2.6.3 - Reflected Cross-Site ScriptingCVE-2021-250856.1 Medium
- unknown orders tracking for woocommerceOrders Tracking for WooCommerce < 1.1.10 - Reflected Cross-Site ScriptingCVE-2021-250626.1 Medium
- adtribes product feed pro for woocommerceProduct Feed PRO for WooCommerce < 11.0.7 - Subscriber+ Settings Update to Stored XSSCVE-2021-249745.4 Medium
- pluginus woocommerce currency switcher, unknown woocs – currency switcher for woocommerce. professional and free multi currency plugin – pay in selected currency +1 moreWOOCS < 1.3.7.3 - Reflected Cross-Site ScriptingCVE-2021-250436.1 Medium
- booster for woocommerce, pluggabl booster for woocommerce +1 moreBooster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds ModuleCVE-2021-250016.1 Medium
- booster for woocommerce, pluggabl booster for woocommerce +1 moreBooster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General ModuleCVE-2021-250006.1 Medium
- booster for woocommerce, pluggabl booster for woocommerce +1 moreBooster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing ModuleCVE-2021-249996.1 Medium
- unknown woocommerce pdf invoices & packing slips, wpovernight woocommerce pdf invoices\& packing slips +1 moreWooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site ScriptingCVE-2021-249914.8 Medium
- unknown wcfm marketplace – best multivendor marketplace for woocommerce, wclovers frontend manager for woocommerce along with bookings subscription listings compatible +1 moreWCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL InjectionCVE-2021-248499.8 Critical
- ni woocommerce custom order status project woocommerce custom order status, unknown ni woocommerce custom order status +1 moreNi WooCommerce Custom Order Status < 1.9.7 - Subscriber+ SQL InjectionCVE-2021-248468.8 High
- woocommerce currency switcher, unknown woocs – currency switcher for woocommerce. professional and free multi currency plugin – pay in selected currency +1 moreWooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site ScriptingCVE-2021-249386.1 Medium
- unknown wcfm – frontend manager for woocommerce along with bookings subscription listings compatible, wclovers frontend manager for woocommerce along with bookings subscription listings compatible +1 moreWCFM - Frontend Manager for WooCommerce < 6.5.12 - Customer/Subscriber+ SQL InjectionCVE-2021-248358.8 High
- coinmarketstats bitcoin \/ altcoin payment gateway for woocommerce, unknown bitcoin / altcoin payment gateway for woocommerce & multivendor store / shop +1 moreBitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site ScriptingCVE-2021-246796.1 Medium
- dpl product feed on woocommerce, unknown product feed on woocommerce for google, awin, shareasale, bing, and more +1 moreCreate WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL InjectionCVE-2021-245117.2 High
- cozy vision technologies pvt. ltd. sms alert order notifications – woocommerce, cozyvision sms alert order notifications +1 moreSMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site ScriptingCVE-2021-245886.1 Medium
- unknown woolentor – woocommerce elementor addons + builder, hasthemes woolentor - woocommerce elementor addons \+ builder +1 moreWooLentor - WooCommerce Elementor Addons + Builder < 1.8.6 - Contributor+ Stored XSSCVE-2021-242625.4 Medium
- unknown woocommerce help scout, woocommerce help scout +1 moreWooCommerce Help Scout < 2.9.1 - Unauthenticated Arbitrary File Upload leading to RCECVE-2021-242129.8 Critical
- unknown woocommerce upload filesWooCommerce Upload Files < 59.4 - Unauthenticated Arbitrary File UploadCVE-2021-241719.8 Critical
- algolplus advanced order export for woocommerceAdvanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)CVE-2021-24169Public exploitEPSS 10.3%6.1 Medium