Woocommerce vulnerabilities, page 5

89 vulnerabilities

Known vulnerabilities in Woocommerce products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 48 products.

9.8CriticalCVE-2023-35049woocommerce · stripe_payment_gateway +2 moreWordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerabilityMissing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.4.0.EPSS0.61%8.8HighCVE-2023-35880woocommerce · brands +2 moreWordPress WooCommerce Brands Plugin <= 1.6.49 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.49 versions.EPSS0.26%8.8HighCVE-2023-33316woocommerce · automatewoo +2 moreWordPress WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.EPSS0.25%7.1HighCVE-2023-33317woocommerce · returns_and_warranty_requests +1 moreWordPress WooCommerce Warranty Requests Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <= 2.1.6 versions.EPSS0.38%7.1HighCVE-2023-33332woocommerce_product_vendors_project · woocommerce_product_vendors +2 moreWordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Product Vendors plugin <= 2.1.76 versions.EPSS0.38%8.5HighCVE-2023-33330woocommerce · automatewoo +1 moreWordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.50.EPSS0.64%9.9CriticalCVE-2023-33318woocommerce · automatewoo +1 moreWordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File UploadUnrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40.EPSS0.81%7.1HighCVE-2023-33319woocommerce · automatewoo +2 moreWordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.EPSS0.38%8.5HighCVE-2023-33331woo · product_vendors +2 moreWordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.76.EPSS0.93%