Skip to contentUnknown Woocommerce vulnerabilities
- najeebmedia woocommerce checkout field managerWooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File UploadCVE-2022-43289.8 Critical
- unknown product gtin (ean, upc, isbn) for woocommerce, product gtin \(ean\, upc\, isbn\) for woocommerce project gtin \(ean\, upc\, isbn\) for woocommerce +1 moreProduct GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSSCVE-2023-00685.4 Medium
- unknown product slider and carousel with category for woocommerce, essentialplugin product slider and carousel with category with woocommerce +1 moreProduct Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via ShortcodeCVE-2022-47915.4 Medium
- gsplugins gs products slider, unknown gs products slider for woocommerce +1 moreGS Products Slider for WooCommerce < 1.5.9 - Contributor+ Stored XSSCVE-2023-04925.4 Medium
- gptaipower gpt ai power, unknown gpt ai power: content writer & chatgpt & image generator & woocommerce product writer & ai training +1 moreGPT3 AI Content Writer < 1.4.38 - Subscriber+ Arbitrary Post Content UpdateCVE-2023-04054.3 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.16.0 - Contributor+ LFICVE-2023-00808.8 High
- pickplugins product slider for woocommerce, unknown product slider for woocommerce by pickplugins +1 morePickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSSCVE-2023-01665.4 Medium
- judge product reviews for woocommerce, unknown judge.me product reviews for woocommerce +1 moreJudge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSSCVE-2023-00615.4 Medium
- unknown ean for woocommerceEAN for WooCommerce < 4.4.3 - Contributor+ Stored XSSCVE-2023-00625.4 Medium
- unknown event manager and tickets selling plugin for woocommerce, mage-people event manager and tickets selling for woocommerce +1 moreEvent Manager and Tickets Selling Plugin for WooCommerce < 3.8.0 - Contributor+ Stored XSSCVE-2023-01445.4 Medium
- unknown membership for woocommerceMembership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File UploadCVE-2022-4395Public exploitEPSS 17.4%9.8 Critical
- booster for woocommerce, pluggabl booster for woocommerce, pluggabl llc booster plus for woocommerce +3 more +5 moreBooster for WooCommerce - Multiple CSRFCVE-2022-40178.8 High
- pickplugins product slider for woocommerceProduct Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in ShortcodeCVE-2022-46295.4 Medium
- thedotstore conditional payment methods for woocommerceConditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLiCVE-2022-45477.2 High
- unknown mautic integration for woocommerceMautic Integration For WooCommerce < 1.0.3 - Arbitrary Options Update via CSRFCVE-2022-44264.3 Medium
- royal-elementor-addons royal elementor addons, unknown royal elementor addons (elementor templates, post grid, mega menu & header footer builder, woocommerce builder, product grid, slider, parallax image & other free elementor widgets) +1 moreRoyal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post DeletionCVE-2022-41023.1 Low
- royal-elementor-addons royal elementor addons, unknown royal elementor addons (elementor templates, post grid, mega menu & header footer builder, woocommerce builder, product grid, slider, parallax image & other free elementor widgets) +1 moreRoyal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post CreationCVE-2022-41034.3 Medium
- activecampaign for woocommerce, unknown activecampaign for woocommerce +1 moreActiveCampaign for WooCommerce < 1.9.8 - Subscriber+ Error Log CleanupCVE-2022-39234.3 Medium
- smackcoders visual email designer for woocommerceVisual Email Designer for WooCommerce < 1.7.2 - Multiple Author+ SQLiCVE-2022-38608.8 High
- product list widget for woocommerce project list widget for woocommerce, unknown product list widget for woocommerce +1 moreProduct list Widget for Woocommerce < 3.4.0 - Reflected XSSCVE-2022-43296.1 Medium
- cedcommerce wholesale market for woocommerceWholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log DownloadCVE-2022-41092.7 Low
- unknown return refund and exchange for woocommerceReturn Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File UploadCVE-2022-4047Public exploit9.8 Critical
- booster elite for woocommerce, for woocommerce, plus for woocommerce +3 more +5 moreBooster for WooCommerce - Reflected Cross-Site ScriptingCVE-2022-42276.1 Medium
- cedcommerce wholesale market for woocommerceWholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File DownloadCVE-2022-41067.5 High
- cedcommerce smsa shipping for woocommerceSMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File DownloadCVE-2022-41076.5 Medium
- cedcommerce wholesale market for woocommerceWholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File DownloadCVE-2022-41084.9 Medium
- booster for woocommerce, pluggabl booster for woocommerce, pluggabl llc booster plus for woocommerce +1 more +3 moreBooster for WooCommerce - Custom Role Creation/Deletion via CSRFCVE-2022-40166.5 Medium
- dpdgroup woocommerce shippingWooCommerce Shipping - DPD baltic < 1.2.11 - Admin+ Stored XSSCVE-2022-40004.8 Medium
- helloprint, helloprint plug your woocommerce into the largest catalog of customized print products from helloprint +1 moreHelloprint < 1.4.7 - Reflected Cross-Site ScriptingCVE-2022-39086.1 Medium
- piwebsolution export customers list csv for woocommerce, unknown export customers list csv for woocommerce, wordpress users csv, export guest customer list +1 moreExport customers list CSV for WooCommerce < 2.0.69 - CSV InjectionCVE-2022-36039.8 Critical
- themehigh checkout field editor (checkout manager) for woocommerce, checkout field editor for woocommerce +1 moreCheckout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object InjectionCVE-2022-34907.2 High
- booster for woocommerce, pluggabl booster for woocommerce, pluggabl llc booster plus for woocommerce +1 more +3 moreBooster for WooCommerce - Checkout Files Deletion via CSRFCVE-2022-37638.1 High
- booster for woocommerce, pluggabl booster for woocommerce, pluggabl llc booster plus for woocommerce +1 more +3 moreBooster for WooCommerce - ShopManager+ Arbitrary File DownloadCVE-2022-37626.5 Medium
- addify role based pricing for woocommerceRole Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File UploadCVE-2022-35378.8 High
- addify role based pricing for woocommerceRole Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR DeserializationCVE-2022-35368.8 High
- opmc woocommerce dropshippingWooCommerce Dropshipping < 4.4 - Unauthenticated SQLiCVE-2022-34819.8 Critical
- kadencewp kadence woocommerce email designerKadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection InjectionCVE-2022-33357.2 High
- unknown wbw currency switcher for woocommerce, wbw plugins currency switcher for woocommerce +1 moreWBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSSCVE-2022-25754.8 Medium
- unknown multivendor marketplace solution for woocommerce – wc marketplace, wc-marketplace multivendor marketplace solution for woocommerce - wc marketplace +1 moreMultivendor Marketplace Solution for WooCommerce < 3.8.12 - Unauthorised AJAX CallsCVE-2022-26574.3 Medium
- mailchimp for woocommerce, unknown mailchimp for woocommerce +1 moreMailChimp for Woocommerce < 2.7.2 - Admin+ SSRFCVE-2022-25562.7 Low
- unknown woocommerce pdf invoices & packing slips, wpovernight woocommerce pdf invoices\& packing slips +1 moreWooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site ScriptingCVE-2022-25376.1 Medium
- mailchimp for woocommerce, unknown mailchimp for woocommerce +1 moreMailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRFCVE-2022-22674.3 Medium
- yotpo reviews for woocommerce project reviews for woocommerce, unknown yotpo reviews for woocommerce (unofficial) +1 moreYotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRFCVE-2022-25556.5 Medium
- funnelkit automations, unknown abandoned cart recovery for woocommerce, follow up emails, newsletter builder & marketing automation by autonami +1 moreAutomations By Autonami < 2.1.2 - Subscriber+ Automation CreationCVE-2022-23894.3 Medium
- pickplugins product slider for woocommerceProduct Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options DeletionCVE-2022-23824.3 Medium
- automattic woocommerceWooCommerce < 6.6.0 - Admin+ Stored HTML InjectionCVE-2022-2099Fix available4.8 Medium
- flycart discount rules for woocommerceWoo Discount Rules < 2.4.2 - Reflected Cross-Site ScriptingCVE-2022-20906.1 Medium
- collect and deliver interface for woocommerce project and deliver interface for woocommerce, unknown cdi – collect and deliver interface for woocommerce +1 moreCDI < 5.1.9 - Reflected Cross-Site-ScriptingCVE-2022-19336.1 Medium
- unknown woocommerce pdf invoices & packing slips, wpovernight woocommerce pdf invoices\& packing slips +1 moreWooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site ScriptingCVE-2022-20926.1 Medium
- visser woocommerce - product importer, unknown woocommerce – product importer +1 moreWooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site ScriptingCVE-2022-15466.1 Medium
- Show moreLoading…