Login Request a demo
WO
Product
woocommerce
by woocommerce · last CVE Jun 20, 2026
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 1High 5Medium 12Low 0
Severity
All severities18Critical1High5Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add woocommerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-52222
8.8
0%
Jan 8
WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: through 8.2.2
CVE-2019-20891
8.8
1%
Jun 19
WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery (CSRF) issue with resultant stored cross-site scripting (XSS) via…
Affected: before 3.6.5
CVE-2017-18356
8.8
2%
Jan 15
In the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after gaining access to the target site with a user account that has at least Shop manager…
Affected: before 3.2.4
CVE-2018-20714
8.1
2%
Jan 15
The logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable to a File Deletion vulnerability
Affected: before 3.4.6
CVE-2024-10567
7.5
0%
Dec 4
TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access
Affected: through 2.9.1
Showing 5