dbcve.org
Vulnerability index

Browse CVEs

60 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Woocommerce MEDIUM 6.1
CVE-2025-5062

The WooCommerce plugin for WordPress is vulnerable to PostMessage-Based Cross-Site Scripting via the 'customize-store' page in all versions up to, an…

Fix: 9.3.4 / 9.4.3+
Fix from $1,600 2025-05-22
Woocommerce MEDIUM 6.1
CVE-2024-9944

The WooCommerce plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 9.0.2. This is due to the plugin not prope…

Fix: 9.1.0+
Fix from $1,600 2024-10-15
Stripe Payment Gateway CRITICAL 9.8
CVE-2023-35049

Missing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a…

Fix: 7.4.1+
Fix from $2,300 2024-06-19
Returns And Warranty Requests MEDIUM 6.5
CVE-2023-51495

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

Fix: 2.3.0+
Fix from $1,600 2024-06-14
Shipping Multiple Addresses MEDIUM 5.4
CVE-2023-51497

Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a…

Fix: 3.8.10+
Fix from $1,600 2024-06-14
Returns And Warranty Requests MEDIUM 5.3
CVE-2023-51496

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

Fix: 2.3.0+
Fix from $1,600 2024-06-14
Woocommerce MEDIUM 5.4
CVE-2024-37297

WooCommerce is an open-source e-commerce platform built on WordPress. A vulnerability introduced in WooCommerce 8.8 allows for cross-site scripting. …

Fix: 8.8.5 / 8.9.3+
Fix from $1,600 2024-06-12
Box Office MEDIUM 5.3
CVE-2023-34003

Missing Authorization vulnerability in Woo WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.1.51.

Fix: 1.1.52+
Fix from $1,600 2024-06-09
Product Vendors CRITICAL 9.8
CVE-2023-51494

Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.1.

Fix: 2.2.2+
Fix from $2,300 2024-06-09
Stripe Payment Gateway HIGH 8.8
CVE-2023-44999

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gatew…

Fix: after 7.6.0
Fix from $1,950 2024-03-27
Box Office HIGH 8.8
CVE-2024-24799

Missing Authorization vulnerability in WooCommerce WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.2.2.

Fix: 1.2.3+
Fix from $1,950 2024-03-26
Payu India Payment Gateway MEDIUM 6.1
CVE-2024-27193

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PayU India PayU India payu-india allows DOM-Bas…

Fix: after 3.8.2
Fix from $1,600 2024-03-15
Woocommerce HIGH 8.8
CVE-2023-52222

Cross-Site Request Forgery (CSRF) vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.2.2.

Fix: after 8.2.2
Fix from $1,950 2024-01-08
Product Addons HIGH 7.2
CVE-2023-32795

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3.

Fix: after 6.1.3
Fix from $1,950 2023-12-28
Shipping Multiple Addresses MEDIUM 6.5
CVE-2023-32799

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addres…

Fix: after 3.8.3
Fix from $1,600 2023-12-21
Automatewoo HIGH 8.8
CVE-2023-33318

Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40.

Fix: after 4.9.40
Fix from $1,950 2023-12-20
Automatewoo HIGH 8.1
CVE-2023-33330

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects Auto…

Fix: 4.9.51+
Fix from $1,950 2023-12-20
Product Recommendations HIGH 8.8
CVE-2023-32744

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Recommendations plugin <= 2.3.0 versions.

Fix: 2.3.0+
Fix from $1,950 2023-11-09
Automatewoo HIGH 8.8
CVE-2023-32745

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions.

Fix: after 5.7.1
Fix from $1,950 2023-11-09
Product Addons HIGH 8.8
CVE-2023-32794

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Add-Ons plugin <= 6.1.3 versions.

Fix: after 6.1.3
Fix from $1,950 2023-11-09
Woocommerce Box Office MEDIUM 5.4
CVE-2023-34004

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Box Office plugin <= 1.1.50 versions.

Fix: after 1.1.50
Fix from $1,600 2023-08-30
Returns And Warranty Requests MEDIUM 6.1
CVE-2023-33317

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <= 2.1.6 versions.

Fix: after 2.1.6
Fix from $1,600 2023-08-30
Composite Products MEDIUM 6.1
CVE-2023-32801

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Composite Products plugin <= 8.7.5 versions.

Fix: after 8.7.5
Fix from $1,600 2023-08-30
Woocommerce Pre Orders MEDIUM 6.1
CVE-2023-32802

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 1.9.0 versions.

Fix: after 1.9.0
Fix from $1,600 2023-08-30
Woocommerce Pre Orders MEDIUM 5.4
CVE-2023-32793

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 2.0.0 versions.

Fix: after 2.0.0
Fix from $1,600 2023-08-30
Woocommerce Brands MEDIUM 5.4
CVE-2023-32746

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.45 versions.

Fix: after 1.6.45
Fix from $1,600 2023-08-30
Shipping Multiple Addresses MEDIUM 6.1
CVE-2023-37873

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions.

Fix: after 3.8.5
Fix from $1,600 2023-08-05
Woocommerce Pre Orders MEDIUM 6.5
CVE-2023-3507

The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logge…

Fix: 2.0.3+
Fix from $1,600 2023-07-31
Woocommerce Pre Orders MEDIUM 6.5
CVE-2023-3508

The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions, which could allow attackers to make…

Fix: 2.0.3+
Fix from $1,600 2023-07-31
Woocommerce Order Barcodes HIGH 8.8
CVE-2023-36511

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Order Barcodes plugin <= 1.6.4 versions.

Fix: after 1.6.4
Fix from $1,950 2023-07-17