Unknown Woocommerce vulnerabilities

3 vulnerabilities

Known vulnerabilities in Unknown Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2022-2099unknownwoocommerce+2
EPSS score
0.67%
The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles5.4CVE-2022-0775unknownwoocommerce+2
EPSS score
0.68%
The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment4.9CVE-2024-1310automatticwoocommerce+2
EPSS score
0.69%
The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)