Vulnerabilities > Woocommerce > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-01-08 | CVE-2023-52222 | Cross-Site Request Forgery (CSRF) vulnerability in Woocommerce Cross-Site Request Forgery (CSRF) vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.2.2. | 8.8 |
2023-12-28 | CVE-2023-32795 | Deserialization of Untrusted Data vulnerability in Woocommerce Product Addons Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3. | 7.2 |
2023-12-20 | CVE-2023-33318 | Unrestricted Upload of File with Dangerous Type vulnerability in Woocommerce Automatewoo Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40. | 8.8 |
2023-12-20 | CVE-2023-33330 | SQL Injection vulnerability in Woocommerce Automatewoo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.50. | 8.1 |
2023-11-09 | CVE-2023-32744 | Cross-Site Request Forgery (CSRF) vulnerability in Woocommerce Product Recommendations Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Recommendations plugin <= 2.3.0 versions. | 8.8 |
2023-11-09 | CVE-2023-32745 | Cross-Site Request Forgery (CSRF) vulnerability in Woocommerce Automatewoo Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions. | 8.8 |
2023-11-09 | CVE-2023-32794 | Cross-Site Request Forgery (CSRF) vulnerability in Woocommerce Product Addons Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Add-Ons plugin <= 6.1.3 versions. | 8.8 |
2023-07-17 | CVE-2023-36511 | Cross-Site Request Forgery (CSRF) vulnerability in Woocommerce Order Barcodes Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Order Barcodes plugin <= 1.6.4 versions. | 8.8 |
2023-07-17 | CVE-2023-36513 | Cross-Site Request Forgery (CSRF) vulnerability in Woocommerce Automatewoo Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions. | 8.8 |
2023-07-17 | CVE-2023-36514 | Cross-Site Request Forgery (CSRF) vulnerability in Woocommerce Shipping multiple Addresses Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions. | 8.8 |