Login Request a demo
WO
Product
Woopayments
by Automattic · last CVE Dec 31, 2023
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 2High 2Medium 1Low 0
Severity
All severities5Critical2High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Woopayments to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-35915
9.8
1%
Dec 20
WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection
Affected: before 5.9.1
CVE-2023-28121
9.8
87%
Apr 12
An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of an elevated user, like…
Affected: 5.6.0 before 5.6.2; 4.9.0; 5.3.0; 5.4.0
CVE-2023-51503
7.5
0%
Dec 31
WordPress WooCommerce Payments Plugin <= 6.6.2 is vulnerable to Insecure Direct Object References (IDOR)
Affected: before 6.7.0
CVE-2023-35916
7.5
1%
Dec 20
WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to Insecure Direct Object References (IDOR)
Affected: before 5.9.1
CVE-2023-49828
5.4
0%
Dec 14
WordPress WooCommerce Payments Plugin <= 6.4.2 is vulnerable to Cross Site Scripting (XSS)
Affected: before 6.5.0
Showing 5