Vulnerabilities > Woocommerce

DATE CVE VULNERABILITY TITLE RISK
2023-11-09 CVE-2023-32794 Unspecified vulnerability in Woocommerce Product Addons 6.1.3
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Add-Ons plugin <= 6.1.3 versions.
network
low complexity
woocommerce
8.8
8.8
2023-08-30 CVE-2023-34004 Unspecified vulnerability in Woocommerce BOX Office
Auth.
network
low complexity
woocommerce
5.4
5.4
2023-08-30 CVE-2023-33317 Unspecified vulnerability in Woocommerce Returns and Warranty Requests
Unauth.
network
low complexity
woocommerce
6.1
6.1
2023-08-30 CVE-2023-32746 Unspecified vulnerability in Woocommerce Brands 1.6.45
Auth.
network
low complexity
woocommerce
5.4
5.4
2023-08-30 CVE-2023-32793 Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0/2.0.0
Auth.
network
low complexity
woocommerce
5.4
5.4
2023-08-30 CVE-2023-32801 Unspecified vulnerability in Woocommerce Composite products 8.7.5
Unauth.
network
low complexity
woocommerce
6.1
6.1
2023-08-30 CVE-2023-32802 Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0
Unauth.
network
low complexity
woocommerce
6.1
6.1
2023-08-25 CVE-2023-32575 Unspecified vulnerability in Woocommerce
Auth.
network
low complexity
woocommerce
4.8
4.8
2023-08-05 CVE-2023-37873 Unspecified vulnerability in Woocommerce Shipping multiple Addresses
Unauth.
network
low complexity
woocommerce
6.1
6.1
2023-07-31 CVE-2023-3507 Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0/2.0.0
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack
network
low complexity
woocommerce
6.5
6.5