Login Request a demo
WO
Vendor
Woocommerce
45 products with CVEs on record
91
CVEs
0
On KEV
0
New 30D
Products
WO
woocommerce
woocommerce
9.8
18 CVEs0 on KEV0 new
AU
Automatewoo
Woocommerce
8.8
7 CVEs0 on KEV0 new
WC
Woocommerce Customers Manager
Woocommerce
8.1
5 CVEs0 on KEV0 new
SM
Shipping Multiple Addresses
Woocommerce
8.8
4 CVEs0 on KEV0 new
WP
Woocommerce Pre-orders
Woocommerce
6.5
4 CVEs0 on KEV0 new
RA
Returns And Warranty Requests
Woocommerce
6.5
3 CVEs0 on KEV0 new
SP
Stripe Payment Gateway
Woocommerce
9.8
3 CVEs0 on KEV0 new
WS
WooCommerce Stripe Payment Gateway
woocommerce
9.8
3 CVEs0 on KEV0 new
BO
Box Office
Woocommerce
8.8
2 CVEs0 on KEV0 new
PC
Paypal Checkout Payment Gateway
Woocommerce
6.5
2 CVEs0 on KEV0 new
PI
Payu India Payment Gateway
Woocommerce
6.1
2 CVEs0 on KEV0 new
PE
Persian-woocommerce
Woocommerce
6.1
2 CVEs0 on KEV0 new
PA
Product Addons
Woocommerce
8.8
2 CVEs0 on KEV0 new
PV
Product Vendors
WooCommerce
9.8
2 CVEs0 on KEV0 new
WP
WooCommerce PayPal Payments
woocommerce
8.2
2 CVEs0 on KEV0 new
BR
Brands
Woocommerce
8.8
1 CVEs0 on KEV0 new
BS
Bulk Stock Management
Woocommerce
6.1
1 CVEs0 on KEV0 new
CF
Checkout Field Editor
Woocommerce
8.2
1 CVEs0 on KEV0 new
CP
Composite Products
Woocommerce
6.1
1 CVEs0 on KEV0 new
DR
Dropshipping
Woocommerce
5.3
1 CVEs0 on KEV0 new
GC
Gift Cards
Woocommerce
8.8
1 CVEs0 on KEV0 new
GF
Google for WooCommerce
woocommerce
5.3
1 CVEs0 on KEV0 new
HS
Help Scout
Woocommerce
9.8
1 CVEs0 on KEV0 new
IF
Icons For Features
Woocommerce
6.1
1 CVEs0 on KEV0 new
NT
Nab Transact
Woocommerce
7.5
1 CVEs0 on KEV0 new
PP
Paypal Payments
Woocommerce
8.8
1 CVEs0 on KEV0 new
PW
Persian Woocommerce Sms
Woocommerce
6.1
1 CVEs0 on KEV0 new
PR
Product Recommendations
Woocommerce
8.8
1 CVEs0 on KEV0 new
SM
Sidebar Manager TO Woosidebars Converter
Woocommerce
6.1
1 CVEs0 on KEV0 new
ST
Streamline.lv
Woocommerce
9.8
1 CVEs0 on KEV0 new
SU
Subscriptions
Woocommerce
6.1
1 CVEs0 on KEV0 new
UF
Upload Files
Woocommerce
9.8
1 CVEs0 on KEV0 new
WB
Woocommerce Box Office
Woocommerce
5.4
1 CVEs0 on KEV0 new
WB
Woocommerce Brands
Woocommerce
5.4
1 CVEs0 on KEV0 new
WC
Woocommerce Currency Switcher
Woocommerce
6.1
1 CVEs0 on KEV0 new
WO
WooCommerce One Page Checkout
WooCommerce
7.6
1 CVEs0 on KEV0 new
WO
Woocommerce Order Barcodes
Woocommerce
8.8
1 CVEs0 on KEV0 new
WO
Woocommerce Order Status Change Notifier
Woocommerce
6.5
1 CVEs0 on KEV0 new
WS
WooCommerce Shipping Per Product
WooCommerce
4.3
1 CVEs0 on KEV0 new
WS
WooCommerce Smart Coupons
WooCommerce
5.3
1 CVEs0 on KEV0 new
WS
WooCommerce Square
woocommerce
7.5
1 CVEs0 on KEV0 new
WB
Wooframework Branding
Woocommerce
6.1
1 CVEs0 on KEV0 new
WT
Wooframework Tweaks
Woocommerce
6.1
1 CVEs0 on KEV0 new
WI
WooPayments: Integrated WooCommerce Payments
woocommerce
6.5
1 CVEs0 on KEV0 new
WO
Woosidebars
Woocommerce
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-14073
WP
WooCommerce PayPal Payments
woocommerce
5.3
0%
Aug 1WooCommerce PayPal Payments <= 3.3.2 - Unauthenticated Sensitive Information Disclosure
CVE-2022-50972
WO
WooCommerce
WooCommerce
9.8
1%
Jun 20WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php
CVE-2026-2381
WS
WooCommerce Stripe Payment Gateway
woocommerce
6.5
0%
Jun 16WooCommerce Stripe Payment Gateway <= 10.7.0 - Missing Authorization to Unauthenticated Order Status Manipulation via 'order' Parameter
CVE-2026-9284
WP
WooCommerce PayPal Payments
woocommerce
8.2
0%
May 23WooCommerce PayPal Payments <= 4.0.1 - Missing Authorization to Unauthenticated Order Manipulation and Information Disclosure
CVE-2026-1710
WI
WooPayments: Integrated WooCommerce Payments
woocommerce
6.5
0%
Mar 31WooPayments <= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save_upe_appearance_ajax
CVE-2025-13457
WS
WooCommerce Square
woocommerce
7.5
0%
Jan 10WooCommerce Square <= 5.1.1 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id
CVE-2025-5062
WO
Woocommerce
Woocommerce
6.1
0%
May 22WooCommerce <= 9.4.2 - PostMessage-Based Cross-Site Scripting
CVE-2023-49194
DR
Dropshipping
Woocommerce
5.3
1%
Dec 9WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
CVE-2023-49817
CF
Checkout Field Editor
Woocommerce
8.2
1%
Dec 9WordPress Flexible Woocommerce Checkout Field Editor plugin <= 2.0.1 - Broken Access Control vulnerability
CVE-2024-10567
WO
Woocommerce
Woocommerce
7.5
0%
Dec 4TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access
CVE-2024-10486
GF
Google for WooCommerce
woocommerce
5.3
1%
Nov 18Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File
CVE-2024-10820
UF
Upload Files
Woocommerce
9.8
1%
Nov 13WooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Upload
CVE-2024-43219
PE
Persian-woocommerce
Woocommerce
5.3
0%
Nov 1WordPress Persian WooCommerce plugin <= 7.1.6 - Broken Access Control vulnerability
CVE-2024-47634
ST
Streamline.lv
Woocommerce
9.8
0%
Oct 20WordPress CartBounty plugin <= 8.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2020-36841
WS
WooCommerce Smart Coupons
WooCommerce
5.3
0%
Oct 16WooCommerce Smart Coupons <= 4.6.0 - Unauthenticated Coupon Creation
CVE-2017-20193
PV
Product Vendors
WooCommerce
6.1
0%
Oct 16Product Vendors <= 2.0.35 - Reflected Cross Site Scripting
CVE-2024-9944
WO
Woocommerce
Woocommerce
6.1
1%
Oct 15WooCommerce <= 9.0.2 - Unauthenticated HTML Injection
CVE-2024-3983
WC
Woocommerce Customers Manager
Woocommerce
8.1
0%
Aug 1WooCommerce Customers Manager < 30.1 - Bulk Action via CSRF
CVE-2024-2843
WC
Woocommerce Customers Manager
Woocommerce
6.5
0%
Aug 1WooCommerce Customers Manager < 30.1 - User Deletion via CSRF
CVE-2024-1747
WC
Woocommerce Customers Manager
Woocommerce
6.5
0%
Aug 1WooCommerce Customers Manager < 30.2 - Subscriber+ Stored XSS
CVE-2023-35049
WS
WooCommerce Stripe Payment Gateway
WooCommerce
9.8
1%
Jun 19WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability
CVE-2023-51495
RA
Returns And Warranty Requests
Woocommerce
6.5
0%
Jun 14WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability
CVE-2023-51496
RA
Returns And Warranty Requests
Woocommerce
5.3
0%
Jun 14WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability
CVE-2023-51497
SM
Shipping Multiple Addresses
Woocommerce
5.4
0%
Jun 14WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.9 - Broken Access Control vulnerability
CVE-2024-37297
WO
woocommerce
woocommerce
5.4
0%
Jun 12WooCommerce has a Cross-Site Scripting Vulnerability in checkout & registration forms
CVE-2023-34003
BO
Box Office
Woocommerce
5.3
0%
Jun 9WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability
CVE-2023-51494
PV
Product Vendors
Woocommerce
9.8
0%
Jun 9WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability
CVE-2023-35881
WO
WooCommerce One Page Checkout
WooCommerce
7.6
1%
May 17WordPress WooCommerce One Page Checkout plugin <= 2.3.0 - Local File Inclusion vulnerability
CVE-2024-1743
WC
Woocommerce Customers Manager
Woocommerce
5.9
0%
Apr 24WooCommerce Customers Manager < 29.8 - Reflected XSS
CVE-2024-0399
WC
Woocommerce Customers Manager
Woocommerce
8.1
3%
Apr 15WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection
CVE-2023-51499
WS
WooCommerce Shipping Per Product
WooCommerce
4.3
0%
Apr 12WordPress WooCommerce Shipping Per Product plugin <= 2.5.4 - Broken Access Control vulnerability
CVE-2023-44999
WS
WooCommerce Stripe Payment Gateway
WooCommerce
8.8
0%
Mar 27WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-24799
WB
WooCommerce Box Office
WooCommerce
8.8
1%
Mar 26WordPress WooCommerce Box Office plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2024-27193
PI
Payu India Payment Gateway
Woocommerce
6.1
0%
Mar 15Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PayU India PayU India payu-india allows DOM-Based XSS.This issue affects PayU…
CVE-2022-0775
WO
Woocommerce
Woocommerce
4.3
1%
Jan 16The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to…
CVE-2023-52222
WO
Woocommerce
Woocommerce
8.8
0%
Jan 8Cross-Site Request Forgery (CSRF) vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.2.2
CVE-2023-32795
PA
Product Addons
Woocommerce
7.2
1%
Dec 28Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3
CVE-2023-32799
SM
Shipping Multiple Addresses
Woocommerce
6.5
1%
Dec 21Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3
CVE-2023-33318
AU
Automatewoo
Woocommerce
8.8
1%
Dec 20Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40
CVE-2023-33330
AU
Automatewoo
Woocommerce
8.1
1%
Dec 20Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through…
CVE-2023-32743
AU
Automatewoo
Woocommerce
4.9
1%
Dec 20Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through…
CVE-2023-32794
PA
Product Addons
Woocommerce
8.8
0%
Nov 9Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Add-Ons plugin <= 6.1.3 versions
CVE-2023-32745
AU
Automatewoo
Woocommerce
8.8
0%
Nov 9Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions
CVE-2023-32744
PR
Product Recommendations
Woocommerce
8.8
0%
Nov 9Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Recommendations plugin <= 2.3.0 versions
CVE-2023-34004
WB
Woocommerce Box Office
Woocommerce
5.4
0%
Aug 30Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Box Office plugin <= 1.1.50 versions
CVE-2023-33317
RA
Returns And Warranty Requests
Woocommerce
6.1
0%
Aug 30Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <= 2.1.6 versions
CVE-2023-32802
WP
Woocommerce Pre-orders
Woocommerce
6.1
0%
Aug 30Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 1.9.0 versions
CVE-2023-32801
CP
Composite Products
Woocommerce
6.1
0%
Aug 30Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Composite Products plugin <= 8.7.5 versions
CVE-2023-32793
WP
Woocommerce Pre-orders
Woocommerce
5.4
0%
Aug 30Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 2.0.0 versions
CVE-2023-32746
WB
Woocommerce Brands
Woocommerce
5.4
0%
Aug 30Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.45 versions
CVE-2023-32575
WO
Woocommerce
Woocommerce
4.8
0%
Aug 25Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.25 versions
CVE-2023-37873
SM
Shipping Multiple Addresses
Woocommerce
6.1
0%
Aug 5Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions
CVE-2023-3508
WP
Woocommerce Pre-orders
Woocommerce
6.5
0%
Jul 31The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions, which could allow attackers to make logged in admins email…
CVE-2023-3507
WP
Woocommerce Pre-orders
Woocommerce
6.5
0%
Jul 31The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary…
CVE-2023-36514
SM
Shipping Multiple Addresses
Woocommerce
8.8
0%
Jul 17Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions
CVE-2023-36513
AU
Automatewoo
Woocommerce
8.8
0%
Jul 17Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions
CVE-2023-36511
WO
Woocommerce Order Barcodes
Woocommerce
8.8
0%
Jul 17Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Order Barcodes plugin <= 1.6.4 versions
CVE-2023-35880
BR
Brands
Woocommerce
8.8
0%
Jul 17Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.49 versions
CVE-2023-35918
BS
Bulk Stock Management
Woocommerce
6.1
0%
Jun 22Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Bulk Stock Management plugin <= 2.2.33 versions
CVE-2023-35917
PP
Paypal Payments
Woocommerce
8.8
0%
Jun 22Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce PayPal Payments plugin <= 2.0.4 versions