Woocommerce Automatewoo vulnerabilities

7 vulnerabilities

Known vulnerabilities in Woocommerce Automatewoo, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2023-36513woocommerceautomatewoo+1
EPSS score
0.25%
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions.7.6CVE-2023-32743woocommerceautomatewoo+1
EPSS score
0.61%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.1.8.8CVE-2023-32745woocommerceautomatewoo+1
EPSS score
0.30%
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions.8.8CVE-2023-33316woocommerceautomatewoo+2
EPSS score
0.25%
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.8.5CVE-2023-33330woocommerceautomatewoo+1
EPSS score
0.64%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.50.9.9CVE-2023-33318woocommerceautomatewoo+1
EPSS score
0.81%
Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40.7.1CVE-2023-33319woocommerceautomatewoo+2
EPSS score
0.38%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.