Skip to contentUnknown Woocommerce vulnerabilities
- unknown openpix for woocommerceOpenPix < 2.13.6 - Subscriber+ Payment Gateway Settings ResetCVE-2025-154006.5 Medium
- unknown make email customizer for woocommerceMake Email Customizer for WooCommerce <= 1.0.6 - Subscriber+ Arbitrary Options UpdateCVE-2025-112375.3 Medium
- unknown product filter for woocommerce by wbwProduct Filter by WBW <= 2.9.7 - Unauthenticated SQL InjectionCVE-2025-84167.5 High
- unknown product filter for woocommerce by wbwProduct Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings UpdateCVE-2025-112695.3 Medium
- nmedia admin and customer messages after order for woocommerce: orderconvoOrderConvo <= 15.1 - Unauthenticated Arbitrary File ReadCVE-2025-10162Public exploit8.6 High
- cedcommerce wholesale market, wholesale market for woocommerce +1 moreWholesale Market <= 2.2.2 - Settings Update via CSRFCVE-2022-43636.5 Medium
- thisfunctional ctt expresso para woocommerceCTT Expresso para WooCommerce < 3.2.13 - Admin+ Stored XSSCVE-2024-64784.8 Medium
- unknown wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting, wedevs wp erp +1 moreWP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee InformationCVE-2024-128127.5 High
- unknown wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting, wedevs wp erp +1 moreWP ERP | Complete HR solution with recruitment < 1.13.4 - Admin+ Stored XSSCVE-2024-128084.8 Medium
- excellent dynamics make email customizer for woocommerceWordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-325117.1 High
- klarna checkout for woocommerce, unknown klarna checkout for woocommerce +1 moreKlarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive LoggingCVE-2024-139257.5 High
- unknown product filter for woocommerce by wbwProduct Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend ParameterCVE-2025-23177.5 High
- unknown product labels for woocommerce (sale badges), acowebs product labels for woocommerce \(sale badges\) +1 moreProduct Labels For Woocommerce < 1.5.9 - Admin+ SQLiCVE-2024-121094.1 Medium
- unknown product labels for woocommerce (sale badges), acowebs product labels for woocommerce \(sale badges\) +1 moreProduct Labels For Woocommerce < 1.5.11 - Admin+ SQLiCVE-2024-106384.1 Medium
- unknown url shortener | conversion tracking | ab testing | woocommerce, tahminajannat url shortener \| conversion tracking \| ab testing \| woocommerce +1 moreeasy-broken-link-checker <= 9.0.2 - Admin+ Stored XSSCVE-2025-13633.5 Low
- unknown url shortener | conversion tracking | ab testing | woocommerce, tahminajannat url shortener \| conversion tracking \| ab testing \| woocommerce +1 moreeasy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRFCVE-2025-13624.3 Medium
- unknown url shortener | conversion tracking | ab testing | woocommerce, tahminajannat url shortener \| conversion tracking \| ab testing \| woocommerce +1 moreEasy Broken Link Checker <= 9.0.2 - Reflected XSSCVE-2024-138686.1 Medium
- unknown woocommerce cart count shortcode, prontotools woo cart count shortcode +1 moreWooCommerce Cart Count Shortcode < 1.1.0 - Contributor+ XSSCVE-2024-105635.4 Medium
- tahminajannat url shortener | conversion tracking | ab testing | woocommerceWordPress URL Shortener WooCommerce Plugin <= 9.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237897.1 High
- unknown woocommerce customers managerWooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege EscalationCVE-2024-133438.8 High
- hasthemes free woocommerce theme 99fy extensionWordPress Free WooCommerce Theme 99fy Extension plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-228016.5 Medium
- digireturn dn shipping by weight for woocommerce, shipping by weight for woocommerce +1 moreDN Shipping by Weight for WooCommerce < 1.2 - Settings Update via CSRFCVE-2024-118424.3 Medium
- prontotools woocommerce cart count shortcodeWooCommerce Cart Count Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-125176.4 Medium
- unknown recover woocommerce cart abandonment, newsletter, email marketing, marketing automation by funnelkit, funnelkit automations +1 moreAutomation By Autonami < 3.3.0 - Unauthenticated SQLiCVE-2024-91868.6 High
- unknown woocommerce upload files, woocommerce upload files +1 moreWooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File UploadCVE-2024-108209.8 Critical
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- flycart discount rules for woocommerceDiscount Rules for WooCommerce <= 2.0.2 - Missing AuthorizationCVE-2020-368346.3 Medium
- woobewoo product filter, unknown product filter for woocommerce by wbw +1 moreProduct Filter by WooBeWoo <= 1.4.9 - Missing AuthorizationCVE-2021-44447.3 High
- flycart discount rules for woocommerceDiscount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons <= 2.6.5 - Reflected Cross-Site ScriptingCVE-2024-85414.7 Medium
- templateinvaders ti woocommerce wishlistTI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection via lang parametersCVE-2024-91567.5 High
- unknown yith woocommerce ajax searchWordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerabilityCVE-2024-473509.3 Critical
- themify woocommerce product filter, themifyme themify – woocommerce product filter +1 moreWordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440465.9 Medium
- unknown yith woocommerce ajax searchYITH WooCommerce Ajax Search < 2.7.1 - Contributor+ Stored XSSCVE-2024-78465.4 Medium
- mansurahamed chatbot support ai, unknown chatbot support ai: free chatgpt chatbot, woocommerce chatbot +1 moreChatbot Support AI <= 1.0.2 - Admin+ Stored XSSCVE-2024-67224.8 Medium
- unknown woocommerce customers manager, woocommerce customers manager +1 moreWooCommerce Customers Manager < 30.1 - Bulk Action via CSRFCVE-2024-39838.1 High
- unknown woocommerce customers manager, woocommerce customers manager +1 moreWooCommerce Customers Manager < 30.1 - User Deletion via CSRFCVE-2024-28436.5 Medium
- unknown woocommerce customers manager, woocommerce customers manager +1 moreWooCommerce Customers Manager < 30.2 - Subscriber+ Stored XSSCVE-2024-17476.5 Medium
- limpinho ctt expresso para woocommerceCTT Expresso para WooCommerce <= 3.2.12 - Information Exposure via Unprotected DirectoryCVE-2024-66875.3 Medium
- gravitymaster product enquiry for woocommerceProduct Enquiry for WooCommerce < 3.1.8 - Admin+ Stored XSSCVE-2024-39645.9 Medium
- themify product filter, woocommerce product filter, themifyme themify – woocommerce product filter +2 moreThemify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions ParameterCVE-2024-60279.8 Critical
- unknown pricing deals for woocommerceWordPress Pricing Deals for WooCommercePricing Deals for WooCommerce plugin <= 2.0.3.2 - Broken Access Control vulnerabilityCVE-2023-412405.3 Medium
- booster for woocommerce, pluggabl llc booster elite for woocommerce +1 moreWordPress Booster Elite for WooCommerce plugin < 7.1.3 - Authenticated Production Creation/Modification VulnerabilityCVE-2023-515116.5 Medium
- unknown yith woocommerce ajax searchYITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-44557.2 High
- unknown orders tracking for woocommerceOrders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2024-40396.5 Medium
- unknown woocommerce customers managerWooCommerce Customers Manager < 29.8 - Subscriber+ Email DisclosureCVE-2024-17566.5 Medium
- unknown woocommerce customers manager, woocommerce customers manager +1 moreWooCommerce Customers Manager < 29.8 - Reflected XSSCVE-2024-17435.9 Medium
- automattic woocommerceWooCommerce < 8.6 - Contributor+ Private/Draft Products AccessCVE-2024-13104.9 Medium
- unknown woocommerce customers manager, woocommerce customers manager +1 moreWooCommerce Customers Manager < 29.7 - Subscriber+ SQL InjectionCVE-2024-0399Public exploit8.1 High
- pickplugins post grid, unknown post grid, form maker, popup maker, woocommerce blocks, post blocks, post carousel +1 moreCombo Blocks < 2.2.76 - Unauthenticated Password Protected Posts AccessCVE-2024-0881EPSS 16.9%5.4 Medium
- cartflows woocommerce cart abandonment recoveryWooCommerce Cart Abandonment Recovery < 1.2.27 - Templates/Abandoned Orders Deletion via CSRFCVE-2024-23226.8 Medium
- Show moreLoading…