Login Request a demo
WO
Vendor
WooCommerce
52 products with CVEs on record
109
CVEs
0
On KEV
0
New 30D
Products
WO
woocommerce
woocommerce
9.8
18 CVEs0 on KEV0 new
AU
AutomateWoo
WooCommerce
8.8
7 CVEs0 on KEV0 new
WC
Woocommerce Customers Manager
Woocommerce
8.1
5 CVEs0 on KEV0 new
WS
WooCommerce Stripe Payment Gateway
woocommerce
9.8
5 CVEs0 on KEV0 new
PV
Product Vendors
WooCommerce
9.8
4 CVEs0 on KEV0 new
SM
Shipping Multiple Addresses
WooCommerce
8.8
4 CVEs0 on KEV0 new
WP
WooCommerce Pre-Orders
WooCommerce
6.5
4 CVEs0 on KEV0 new
RA
Returns and Warranty Requests
WooCommerce
6.5
3 CVEs0 on KEV0 new
SP
Stripe Payment Gateway
Woocommerce
9.8
3 CVEs0 on KEV0 new
WP
WooCommerce PayPal Payments
woocommerce
8.8
3 CVEs0 on KEV0 new
BO
Box Office
Woocommerce
8.8
2 CVEs0 on KEV0 new
PC
Paypal Checkout Payment Gateway
Woocommerce
6.5
2 CVEs0 on KEV0 new
PI
Payu India Payment Gateway
Woocommerce
6.1
2 CVEs0 on KEV0 new
PE
Persian-woocommerce
Woocommerce
6.1
2 CVEs0 on KEV0 new
PA
Product Add-Ons
WooCommerce
8.8
2 CVEs0 on KEV0 new
PA
Product Addons
Woocommerce
8.8
2 CVEs0 on KEV0 new
WB
WooCommerce Bookings
WooCommerce
8.8
2 CVEs0 on KEV0 new
WB
WooCommerce Box Office
WooCommerce
8.8
2 CVEs0 on KEV0 new
WB
WooCommerce Brands
WooCommerce
8.8
2 CVEs0 on KEV0 new
WF
WooCommerce Follow-Up Emails (AutomateWoo)
WooCommerce
8.8
2 CVEs0 on KEV0 new
WS
WooCommerce Square
woocommerce
8.1
2 CVEs0 on KEV0 new
BR
Brands
Woocommerce
8.8
1 CVEs0 on KEV0 new
BS
Bulk Stock Management
WooCommerce
6.1
1 CVEs0 on KEV0 new
CP
Canada Post Shipping Method
WooCommerce
8.8
1 CVEs0 on KEV0 new
CF
Checkout Field Editor
Woocommerce
8.2
1 CVEs0 on KEV0 new
CP
Composite Products
WooCommerce
6.1
1 CVEs0 on KEV0 new
DR
Dropshipping
Woocommerce
5.3
1 CVEs0 on KEV0 new
GC
Gift Cards
Woocommerce
8.8
1 CVEs0 on KEV0 new
GO
GoCardless
WooCommerce
7.5
1 CVEs0 on KEV0 new
GF
Google for WooCommerce
woocommerce
5.3
1 CVEs0 on KEV0 new
HS
Help Scout
Woocommerce
9.8
1 CVEs0 on KEV0 new
IF
Icons For Features
Woocommerce
6.1
1 CVEs0 on KEV0 new
NT
Nab Transact
Woocommerce
7.5
1 CVEs0 on KEV0 new
PP
Paypal Payments
Woocommerce
8.8
1 CVEs0 on KEV0 new
PW
Persian Woocommerce Sms
Woocommerce
6.1
1 CVEs0 on KEV0 new
PR
Product Recommendations
WooCommerce
8.8
1 CVEs0 on KEV0 new
SM
Sidebar Manager TO Woosidebars Converter
Woocommerce
6.1
1 CVEs0 on KEV0 new
ST
Streamline.lv
Woocommerce
9.8
1 CVEs0 on KEV0 new
SU
Subscriptions
Woocommerce
6.1
1 CVEs0 on KEV0 new
UF
Upload Files
Woocommerce
9.8
1 CVEs0 on KEV0 new
WS
Woo Subscriptions
WooCommerce
7.5
1 CVEs0 on KEV0 new
WC
Woocommerce Currency Switcher
Woocommerce
6.1
1 CVEs0 on KEV0 new
WO
WooCommerce One Page Checkout
WooCommerce
7.6
1 CVEs0 on KEV0 new
WO
WooCommerce Order Barcodes
WooCommerce
8.8
1 CVEs0 on KEV0 new
WO
Woocommerce Order Status Change Notifier
Woocommerce
6.5
1 CVEs0 on KEV0 new
WP
WooCommerce Product Vendors
WooCommerce
6.1
1 CVEs0 on KEV0 new
WS
WooCommerce Shipping Per Product
WooCommerce
4.3
1 CVEs0 on KEV0 new
WS
WooCommerce Smart Coupons
WooCommerce
5.3
1 CVEs0 on KEV0 new
WB
Wooframework Branding
Woocommerce
6.1
1 CVEs0 on KEV0 new
WT
Wooframework Tweaks
Woocommerce
6.1
1 CVEs0 on KEV0 new
WI
WooPayments: Integrated WooCommerce Payments
woocommerce
6.5
1 CVEs0 on KEV0 new
WO
Woosidebars
Woocommerce
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-14073
WP
WooCommerce PayPal Payments
woocommerce
5.3
0%
Aug 1WooCommerce PayPal Payments <= 3.3.2 - Unauthenticated Sensitive Information Disclosure
CVE-2022-50972
WO
WooCommerce
WooCommerce
9.8
1%
Jun 20WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php
CVE-2026-2381
WS
WooCommerce Stripe Payment Gateway
woocommerce
6.5
0%
Jun 16WooCommerce Stripe Payment Gateway <= 10.7.0 - Missing Authorization to Unauthenticated Order Status Manipulation via 'order' Parameter
CVE-2026-9284
WP
WooCommerce PayPal Payments
woocommerce
8.2
0%
May 23WooCommerce PayPal Payments <= 4.0.1 - Missing Authorization to Unauthenticated Order Manipulation and Information Disclosure
CVE-2026-1710
WI
WooPayments: Integrated WooCommerce Payments
woocommerce
6.5
0%
Mar 31WooPayments <= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save_upe_appearance_ajax
CVE-2025-13457
WS
WooCommerce Square
woocommerce
7.5
0%
Jan 10WooCommerce Square <= 5.1.1 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id
CVE-2025-5062
WO
Woocommerce
Woocommerce
6.1
0%
May 22WooCommerce <= 9.4.2 - PostMessage-Based Cross-Site Scripting
CVE-2023-49194
DR
Dropshipping
Woocommerce
5.3
1%
Dec 9WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
CVE-2023-49817
CF
Checkout Field Editor
Woocommerce
8.2
1%
Dec 9WordPress Flexible Woocommerce Checkout Field Editor plugin <= 2.0.1 - Broken Access Control vulnerability
CVE-2024-10567
WO
Woocommerce
Woocommerce
7.5
0%
Dec 4TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access
CVE-2024-10486
GF
Google for WooCommerce
woocommerce
5.3
1%
Nov 18Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File
CVE-2024-10820
UF
Upload Files
Woocommerce
9.8
1%
Nov 13WooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Upload
CVE-2024-43219
PE
Persian-woocommerce
Woocommerce
5.3
0%
Nov 1WordPress Persian WooCommerce plugin <= 7.1.6 - Broken Access Control vulnerability
CVE-2024-47634
ST
Streamline.lv
Woocommerce
9.8
0%
Oct 20WordPress CartBounty plugin <= 8.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2020-36841
WS
WooCommerce Smart Coupons
WooCommerce
5.3
0%
Oct 16WooCommerce Smart Coupons <= 4.6.0 - Unauthenticated Coupon Creation
CVE-2017-20193
PV
Product Vendors
WooCommerce
6.1
0%
Oct 16Product Vendors <= 2.0.35 - Reflected Cross Site Scripting
CVE-2024-9944
WO
Woocommerce
Woocommerce
6.1
1%
Oct 15WooCommerce <= 9.0.2 - Unauthenticated HTML Injection
CVE-2024-3983
WC
Woocommerce Customers Manager
Woocommerce
8.1
0%
Aug 1WooCommerce Customers Manager < 30.1 - Bulk Action via CSRF
CVE-2024-2843
WC
Woocommerce Customers Manager
Woocommerce
6.5
0%
Aug 1WooCommerce Customers Manager < 30.1 - User Deletion via CSRF
CVE-2024-1747
WC
Woocommerce Customers Manager
Woocommerce
6.5
0%
Aug 1WooCommerce Customers Manager < 30.2 - Subscriber+ Stored XSS
CVE-2023-35049
WS
WooCommerce Stripe Payment Gateway
WooCommerce
9.8
1%
Jun 19WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability
CVE-2023-51495
RA
Returns And Warranty Requests
Woocommerce
6.5
0%
Jun 14WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability
CVE-2023-51496
RA
Returns And Warranty Requests
Woocommerce
5.3
0%
Jun 14WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability
CVE-2023-51497
SM
Shipping Multiple Addresses
Woocommerce
5.4
0%
Jun 14WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.9 - Broken Access Control vulnerability
CVE-2024-37297
WO
woocommerce
woocommerce
5.4
0%
Jun 12WooCommerce has a Cross-Site Scripting Vulnerability in checkout & registration forms
CVE-2023-34003
BO
Box Office
Woocommerce
5.3
0%
Jun 9WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability
CVE-2023-51494
PV
Product Vendors
Woocommerce
9.8
0%
Jun 9WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability
CVE-2023-35881
WO
WooCommerce One Page Checkout
WooCommerce
7.6
1%
May 17WordPress WooCommerce One Page Checkout plugin <= 2.3.0 - Local File Inclusion vulnerability
CVE-2024-1743
WC
Woocommerce Customers Manager
Woocommerce
5.9
0%
Apr 24WooCommerce Customers Manager < 29.8 - Reflected XSS
CVE-2024-0399
WC
Woocommerce Customers Manager
Woocommerce
8.1
3%
Apr 15WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection
CVE-2023-51499
WS
WooCommerce Shipping Per Product
WooCommerce
4.3
0%
Apr 12WordPress WooCommerce Shipping Per Product plugin <= 2.5.4 - Broken Access Control vulnerability
CVE-2023-44999
WS
WooCommerce Stripe Payment Gateway
WooCommerce
8.8
0%
Mar 27WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-24799
WB
WooCommerce Box Office
WooCommerce
8.8
1%
Mar 26WordPress WooCommerce Box Office plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2024-27193
PI
Payu India Payment Gateway
Woocommerce
6.1
0%
Mar 15WordPress PayU India plugin <= 3.8.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2022-0775
WO
Woocommerce
Woocommerce
4.3
1%
Jan 16WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion
CVE-2023-52222
WO
Woocommerce
Woocommerce
8.8
0%
Jan 8WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-51502
WS
WooCommerce Stripe Payment Gateway
WooCommerce
9.8
1%
Jan 5WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-32795
PA
Product Add-Ons
WooCommerce
7.2
1%
Dec 28WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to PHP Object Injection
CVE-2023-32799
SM
Shipping Multiple Addresses
WooCommerce
6.5
1%
Dec 21WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.3 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-32747
WB
WooCommerce Bookings
WooCommerce
7.5
0%
Dec 21WordPress WooCommerce Bookings Plugin <= 1.15.78 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-33318
AU
AutomateWoo
WooCommerce
8.8
1%
Dec 20WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload
CVE-2023-32743
AU
AutomateWoo
WooCommerce
4.9
1%
Dec 20WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to SQL Injection
CVE-2023-33330
AU
AutomateWoo
WooCommerce
8.1
1%
Dec 20WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection
CVE-2023-35914
WS
Woo Subscriptions
WooCommerce
7.5
1%
Dec 20WordPress WooCommerce Subscriptions Plugin <= 5.1.2 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-35876
WS
WooCommerce Square
WooCommerce
8.1
1%
Dec 20WordPress WooCommerce Square Plugin <= 3.8.1 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-37871
GO
GoCardless
WooCommerce
7.5
1%
Dec 20WordPress WooCommerce GoCardless Gateway Plugin <= 2.5.6 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-33331
PV
Product Vendors
WooCommerce
7.2
1%
Dec 18WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injection
CVE-2023-47789
CP
Canada Post Shipping Method
WooCommerce
8.8
0%
Dec 18WordPress WooCommerce Canada Post Shipping Plugin <= 2.8.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-47787
WB
WooCommerce Bookings
WooCommerce
8.8
0%
Dec 18WordPress WooCommerce Bookings Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-32744
PR
Product Recommendations
WooCommerce
8.8
0%
Nov 9WordPress WooCommerce Product Recommendations Plugin < 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-32745
AU
AutomateWoo
WooCommerce
8.8
0%
Nov 9WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-32794
PA
Product Add-Ons
WooCommerce
8.8
0%
Nov 9WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-35879
PV
Product Vendors
WooCommerce
9.8
1%
Oct 31WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injection
CVE-2023-34004
WB
WooCommerce Box Office
WooCommerce
5.4
0%
Aug 30WordPress WooCommerce Box Office Plugin <= 1.1.50 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-33317
RA
Returns and Warranty Requests
WooCommerce
6.1
0%
Aug 30WordPress WooCommerce Warranty Requests Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32746
WB
WooCommerce Brands
WooCommerce
5.4
0%
Aug 30WordPress WooCommerce Brands Plugin <= 1.6.45 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32793
WP
WooCommerce Pre-Orders
WooCommerce
5.4
0%
Aug 30WordPress WooCommerce Pre-Orders Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32802
WP
WooCommerce Pre-Orders
WooCommerce
6.1
0%
Aug 30WordPress WooCommerce Pre-Orders Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32801
CP
Composite Products
WooCommerce
6.1
0%
Aug 30WordPress WooCommerce Composite Products Plugin <= 8.7.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32575
WO
Woocommerce
Woocommerce
4.8
0%
Aug 25WordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.25 is vulnerable to Cross Site Scripting (XSS)