Woo vulnerabilities

Products

• Product Vendors 4
• Woocommerce Product Vendors 3
• Woocommerce Warranty Requests 3
• Woocommerce Ship To Multiple Addresses 2
• Woocommerce Subscriptions 2

Newest

• unknown woocommerce subscriptions WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection CVE-2026-18391 9.8 CriticalAugust 12, 2026
• woo woocommerce subscriptions WordPress Woo Subscriptions plugin < 5.8.0 - Broken Access Control vulnerability CVE-2023-50850 4.3 MediumDecember 31, 2024
• woo product vendors Product Vendors <= 2.0.35 - Reflected Cross Site Scripting CVE-2017-20193 4.7 MediumOctober 16, 2024
• woo woocommerce ship to multiple addresses WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.5 - Broken Access Control vulnerability CVE-2023-37872 6.5 MediumJune 19, 2024
• woo automatewoo WordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerability CVE-2023-36512 6.5 MediumJune 19, 2024
• woo woocommerce warranty requests WordPress WooCommerce Warranty Requests plugin <= 2.1.9 - Broken Access Control vulnerability CVE-2023-37870 8.1 HighJune 19, 2024
• woo woocommerce warranty requests, woocommerce returns and warranty requests +1 more WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability CVE-2023-51495 6.5 MediumJune 14, 2024
• woo woocommerce warranty requests, woocommerce returns and warranty requests +1 more WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability CVE-2023-51496 5.3 MediumJune 14, 2024
• woo woocommerce ship to multiple addresses, woocommerce shipping multiple addresses +1 more WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.9 - Broken Access Control vulnerability CVE-2023-51497 5.4 MediumJune 14, 2024
• woo woocommerce canada post shipping WordPress WooCommerce Canada Post Shipping plugin <= 2.8.3 - Broken Access Control vulnerability CVE-2023-51498 5.3 MediumJune 11, 2024
• woo product vendors, woocommerce product vendors +1 more WordPress WooCommerce Product Vendors plugin <= 2.2.2 - Unauthenticated Broken Access Control vulnerability CVE-2023-52186 5.3 MediumJune 11, 2024
• woo woocommerce box office, woocommerce box office +1 more WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability CVE-2023-34003 6.5 MediumJune 9, 2024
• woo woocommerce product vendors, woocommerce product vendors +1 more WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability CVE-2023-51494 5.3 MediumJune 9, 2024
• woo product vendors WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injection CVE-2023-33331 8.5 HighDecember 18, 2023
• woo product vendors WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injection CVE-2023-35879 7.6 HighOctober 31, 2023
• woo woocommerce product vendors, woocommerce product vendors +1 more WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to Cross Site Scripting (XSS) CVE-2023-33332 7.1 HighMay 28, 2023