Vulnerabilities > Woocommerce

DATE CVE VULNERABILITY TITLE RISK
2023-07-17 CVE-2023-35880 Cross-Site Request Forgery (CSRF) vulnerability in Woocommerce Brands 1.6.49
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.49 versions.
network
low complexity
woocommerce CWE-352
8.8
2023-06-22 CVE-2023-35917 Cross-Site Request Forgery (CSRF) vulnerability in Woocommerce Paypal Payments
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce PayPal Payments plugin <= 2.0.4 versions.
network
low complexity
woocommerce CWE-352
8.8
2023-06-22 CVE-2023-35918 Cross-site Scripting vulnerability in Woocommerce Bulk Stock Management
Unauth.
network
low complexity
woocommerce CWE-79
6.1
2023-06-14 CVE-2023-34000 Authorization Bypass Through User-Controlled Key vulnerability in Woocommerce Stripe Payment Gateway
Unauth.
network
low complexity
woocommerce CWE-639
7.5
2023-06-05 CVE-2015-10115 Open Redirect vulnerability in Woocommerce Sidebar Manager to Woosidebars Converter
A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.1.1 on WordPress.
network
low complexity
woocommerce CWE-601
6.1
2023-06-05 CVE-2015-10113 Open Redirect vulnerability in Woocommerce Wooframework Tweaks 1.0.0/1.0.1
A vulnerability classified as problematic was found in WooFramework Tweaks Plugin up to 1.0.1 on WordPress.
network
low complexity
woocommerce CWE-601
6.1
2023-06-05 CVE-2015-10114 Open Redirect vulnerability in Woocommerce Woosidebars
A vulnerability, which was classified as problematic, has been found in WooSidebars Plugin up to 1.4.1 on WordPress.
network
low complexity
woocommerce CWE-601
6.1
2023-06-05 CVE-2015-10112 Open Redirect vulnerability in Woocommerce Wooframework Branding
A vulnerability classified as problematic has been found in WooFramework Branding Plugin up to 1.0.1 on WordPress.
network
low complexity
woocommerce CWE-601
6.1
2023-05-28 CVE-2023-33316 Cross-Site Request Forgery (CSRF) vulnerability in Woocommerce Automatewoo
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.
network
low complexity
woocommerce CWE-352
8.8
2023-05-28 CVE-2023-33319 Cross-site Scripting vulnerability in Woocommerce Automatewoo
Unauth.
network
low complexity
woocommerce CWE-79
6.1