WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce
Published
2020-11-06
Title
WooCommerce < 4.6.2 - Guest Account Creation
Slug
woocommerce
Published
2020-12-28
Title
WooCommerce < 4.7.0 - Arbitrary Order Status Disclosure via IDOR
Slug
woocommerce
Published
2021-04-21
Title
Woocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
woocommerce
Published
2021-07-15
Title
Woocommerce 3.3 to 5.5 - Authenticated Blind SQL Injection
Slug
woocommerce
Published
2021-09-22
Title
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Analytics Report Leaks
Slug
woocommerce
Published
2022-02-23
Title
WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion
Slug
woocommerce
Published
2022-02-23
Title
WooCommerce < 6.2.1 - Path Traversal via Importers
Slug
woocommerce
Published
2022-03-10
Title
WooCommerce < 6.3.1 - Orders Marked as Paid (via PayPal Standard Gateway)
Slug
woocommerce
Published
2022-06-20
Title
WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
Slug
woocommerce
Published
2023-09-11
Title
WooCommerce < 7.9 - Unauthenticated Sensitive Information Disclosure
Slug
woocommerce
Published
2023-09-11
Title
WooCommerce < 8.1.1 - Shop Manager+ User Metadata Disclosure
Slug
woocommerce
Published
2023-09-11
Title
WooCommerce < 7.9.0 - Sensitive Information Exposure
Slug
woocommerce
Published
2023-11-15
Title
WooCommerce <= 8.1.1 & WooCommerce Blocks <= 11.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image alt Attribute
Slug
woocommerce
Published
2023-09-11
Title
WooCommerce < 7.0.1 - Authenticated(Shop Manager+) Sensitive Information Exposure
Slug
woocommerce
Published
2024-01-05
Title
WooCommerce < 8.3.0 - Cross-Site Request Forgery
Slug
woocommerce
Published
2024-01-12
Title
WooCommerce < 8.4.0 - Reflected Cross-Site Scripting
Slug
woocommerce
Published
2024-03-25
Title
WooCommerce < 8.6 - Contributor+ Private/Draft Products Access
Slug
woocommerce
Published
2024-04-05
Title
WooCommerce < 8.6.0 - Cross-Site Request Forgery
Slug
woocommerce
Published
2024-06-10
Title
WooCommerce 8.8.0 - 8.9.2 - Reflected XSS
Slug
woocommerce
Published
2024-06-27
Title
WooCommerce < 9.0.0 - Shop Manager+ Content Injection
Slug
woocommerce
Published
2024-07-24
Title
WooCommerce < 9.1.4 - Stored XSS
Slug
woocommerce
Published
2024-08-21
Title
WooCommerce < 9.2 - Contributor+ Stored XSS
Slug
woocommerce
Published
2024-10-14
Title
WooCommerce < 9.1.0 - Unauthenticated HTML Injection
Slug
woocommerce
Published
2024-12-03
Title
WooCommerce < 9.4.3 - Reflected XSS
Slug
woocommerce
Published
2024-12-03
Title
WooCommerce < 9.4.3 - Unauthenticated Order Creation