CveMateVulnerability intelligence

Woo vulnerabilities

14 vulnerabilities

Known vulnerabilities in Woo products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.

Products

8

Product Vendors4 vulnerabilities
Woocommerce Warranty Requests3 vulnerabilities
Woocommerce Product Vendors2 vulnerabilities
Woocommerce Ship To Multiple Addresses2 vulnerabilities
Automatewoo1 vulnerabilities
Woocommerce Box Office1 vulnerabilities
Woocommerce Canada Post Shipping1 vulnerabilities
Woocommerce Subscriptions1 vulnerabilities

CVE-2017-20193wooproduct_vendors+22y ago16-10-2024 07:31

The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions up to, and including, 2.0.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.CVE-2023-52186wooproduct_vendors+22y ago11-06-2024 09:23

Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.2.CVE-2023-51496woowoocommerce warranty requests+22y ago14-06-2024 05:40

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.CVE-2023-51497woowoocommerce ship to multiple addresses+22y ago14-06-2024 05:33

Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3.8.9.CVE-2023-51494woowoocommerce product vendors+22y ago09-06-2024 09:10

Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.1.CVE-2023-51495woowoocommerce warranty requests+22y ago14-06-2024 05:42

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.CVE-2023-51498woowoocommerce canada post shipping+12y ago11-06-2024 14:37

Missing Authorization vulnerability in Woo WooCommerce Canada Post Shipping.This issue affects WooCommerce Canada Post Shipping: from n/a through 2.8.3.CVE-2023-36512wooautomatewoo+12y ago19-06-2024 12:34

Missing Authorization vulnerability in Woo AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.5.CVE-2023-37870woowoocommerce warranty requests+12y ago19-06-2024 12:29

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.1.9.CVE-2023-37872woowoocommerce ship to multiple addresses+12y ago19-06-2024 13:44

Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3.8.5.CVE-2023-34003woowoocommerce box office+22y ago09-06-2024 10:19

Missing Authorization vulnerability in Woo WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.1.51.CVE-2023-50850woowoocommerce subscriptions+11y ago31-12-2024 12:46

Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Subscriptions: from n/a before 5.8.0.CVE-2023-35879wooproduct_vendors+22y ago31-10-2023 14:20

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.78.CVE-2023-33331wooproduct_vendors+22y ago18-12-2023 22:39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.76.