Skip to contentUnknown Woocommerce vulnerabilities
- booster elite for woocommerce, for woocommerce, unknown booster elite for woocommerce +2 moreWordPress Booster Elite for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerabilityCVE-2023-522346.5 Medium
- booster for woocommerce, pluggabl booster elite for woocommerce +1 moreElite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-19868.8 High
- acowebs product labels for woocommerce (sale badges), product labels for woocommerce \(sale badges\) +1 moreWordPress Product Labels For Woocommerce Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)CVE-2024-248865.9 Medium
- gravitymaster product enquiry for woocommerceProduct Enquiry for WooCommerce < 3.1 - Admin+ Stored XSSCVE-2023-66264.8 Medium
- gravitymaster product enquiry for woocommerceProduct Enquiry for WooCommerce < 3.1 - Arbitrary Enquiry Deletion via CSRFCVE-2023-66254.3 Medium
- gravitymaster product enquiry for woocommerceProduct Enquiry for WooCommerce < 3.2 - Reflected XSSCVE-2023-71516.1 Medium
- all in one b2b for woocommerce project in one b2b for woocommerce, unknown all in one b2b for woocommerce +1 moreAll in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege EscalationCVE-2023-47037.5 High
- tychesoftwares print invoice & delivery notes for woocommerce, print invoice \& delivery notes for woocommerce +1 morePrint Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSSCVE-2023-04796.1 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.17.0 - Contributor+ Stored XSSCVE-2023-00795.4 Medium
- automattic woocommerceWooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment DeletionCVE-2022-07754.3 Medium
- wpengine wpgraphql, unknown wp-graphql-woocommerce +1 moreWPGraphQL WooCommerce <= 0.11.0 - Unauthenticated Coupon Codes DisclosureCVE-2022-15635.3 Medium
- unknown ni purchase order(po) for woocommerce, naziinfotech ni purchase order\(po\) for woocommerce +1 moreNi Purchase Order(PO) For WooCommerce <= 1.2.1 - Admin+ File Upload to Remote Code ExecutionCVE-2023-59577.2 High
- unknown wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting, wedevs wp erp +1 moreWordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL InjectionCVE-2024-217477.6 High
- funnelkit recover woocommerce cart abandonment, newsletter, email marketing, marketing automation by funnelkit, automations +1 moreWordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL InjectionCVE-2023-508577.6 High
- gravity master product enquiry for woocommerceWordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-497615.4 Medium
- multivendorx product catalog mode for woocommerceProduct Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting UpdateCVE-2023-53486.1 Medium
- levantoan woocommerce vietnam checkoutWoocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSSCVE-2023-53256.1 Medium
- gravity master product enquiry for woocommerceWordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-475127.1 High
- gravity master product enquiry for woocommerceWordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-476967.1 High
- atomicwebstrategy woocommerce ninja forms product add-onsWooCommerce Ninja Forms Product Add-ons < 1.7.1 - Unauthenticated Arbitrary File UploadCVE-2023-56019.8 Critical
- glenwpcoder drag and drop multiple file upload for woocommerce, codedropz drag and drop multiple file uploader +1 moreDrag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site ScriptingCVE-2023-48215.4 Medium
- all in one b2b for woocommerce project in one b2b for woocommerce, unknown all in one b2b for woocommerce +1 moreAll in One B2B for WooCommerce <= 1.0.3 - Multiple CSRFCVE-2023-35478.8 High
- nikolov serial codes generator and validator with woocommerce supportSerial Codes Generator and Validator with WooCommerce Support < 2.4.15 - Admin+ Stored XSSCVE-2023-43764.8 Medium
- unknown orders tracking for woocommerceOrders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/ReadCVE-2023-42162.7 Low
- unknown woocommerce pre-orders, woocommerce pre-orders +1 moreWordPress WooCommerce Pre-Orders Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-327936.5 Medium
- unknown woocommerce pre-orders, woocommerce pre-orders +1 moreWordPress WooCommerce Pre-Orders Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-328027.1 High
- multiparcels shipping for woocommerce, unknown multiparcels shipping for woocommerce +1 moreMultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRFCVE-2023-33664.3 Medium
- multiparcels shipping for woocommerce, unknown multiparcels shipping for woocommerce +1 moreMultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSSCVE-2023-39546.1 Medium
- multiparcels shipping for woocommerce, unknown multiparcels shipping for woocommerce +1 moreMultiParcels Shipping For WooCommerce < 1.14.15 - Subscribers+ SQLiCVE-2023-28438.8 High
- multiparcels shipping for woocommerce, unknown multiparcels shipping for woocommerce +1 moreMultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSSCVE-2023-36716.1 Medium
- multiparcels shipping for woocommerce, unknown multiparcels shipping for woocommerce +1 moreMultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment DeletionCVE-2023-33658.1 High
- unknown woocommerce pre-orders, woocommerce pre-orders +1 moreWooCommerce Pre-Orders < 2.0.3 - Unauthorised Actions via CSRFCVE-2023-35086.5 Medium
- unknown woocommerce pre-orders, woocommerce pre-orders +1 moreWooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRFCVE-2023-35076.5 Medium
- addify abandoned cart recovery, advanced free gifts, checkout fields manager +10 more +12 moreMultiple Plugins from Addify - Multiple CSRFCVE-2022-48886.5 Medium
- magepeople team event manager and tickets selling plugin for woocommerce, mage-people event manager and tickets selling for woocommerce +1 moreWordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS)CVE-2023-363835.9 Medium
- gsheetconnector woocommerce google sheet connectorWooCommerce Google Sheet Connector < 1.3.6 - Access Code Update via CSRFCVE-2023-23298.8 High
- wedevs wp erp, unknown wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting +1 moreWP ERP < 1.12.4 - Admin+ SQL InjectionCVE-2023-2744Public exploit7.2 High
- wedevs wp erp, unknown wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting +1 moreWP ERP < 1.12.4 - Reflected Cross-Site ScriptingCVE-2023-27436.1 Medium
- themeisle product addons & fields for woocommerce, product addons \& fields for woocommerce +1 moreProduct Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site ScriptingCVE-2023-22566.1 Medium
- mage-people event manager and tickets selling plugin for woocommerceWordPress Event Manager for WooCommerce Plugin <= 3.7.7 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-471644.3 Medium
- themeisle product addons & fields for woocommerce, product addons \& fields for woocommerce +1 moreProduct Addons & Fields for WooCommerce < 32.0.6 - Admin+ Stored Cross-Site ScriptingCVE-2023-18394.8 Medium
- unknown woocommerce order status change notifier, woocommerce order status change notifier +1 moreWooCommerce Order Status Change Notifier <= 1.1.0 - Subscriber+ Arbitrary Order Status UpdateCVE-2023-21796.5 Medium
- shapedplugin product slider for woocommerce, unknown product slider for woocommerce lite +1 moreProduct Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSSCVE-2023-05375.4 Medium
- unknown bitcoin / altcoin payment gateway for woocommerce & multivendor store / shop, coinmarketstats bitcoin \/ altcoin payment gateway for woocommerce +1 moreBitcoin / AltCoin Payment Gateway <= 1.7.1 - Unauthenticated SQLiCVE-2022-41189.8 Critical
- artisanworkshop japanized for woocommerceJapanized For WooCommerce < 2.5.8 - Reflected XSSCVE-2023-09486.1 Medium
- hasthemes free woocommerce theme 99fy extensionFree WooCommerce Theme 99fy Extension < 1.2.8 - Arbitrary Plugin Activation via CSRFCVE-2023-05034.3 Medium
- this.functional ctt expresso para woocommerceWordPress CTT Expresso para WooCommerce Plugin <= 3.2.11 is vulnerable to Cross Site Scripting (XSS)CVE-2022-475895.9 Medium
- magepeople team event manager and tickets selling plugin for woocommerce, mage-people event manager and tickets selling for woocommerce +1 moreWordPress Event Manager for WooCommerce Plugin <= 3.8.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-284225.9 Medium
- unknown woocommerce multiple customer addresses & shipping, woocommerce multiple customer addresses \& shipping project multiple customer addresses \& shipping +1 moreWooCommerce Multiple Customer Addresses & Shipping < 21.7 - Arbitrary Address Creation/Deletion/Access/Update via IDORCVE-2023-08658.8 High
- themelocation widgets for woocommerce products on elementorWoo Products Widgets For Elementor < 1.0.8 - Contributor+ Stored XSS via ShortcodeCVE-2022-46615.4 Medium
- Show moreLoading…