Vulnerabilities > Woocommerce > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-30 | CVE-2023-33317 | Unspecified vulnerability in Woocommerce Returns and Warranty Requests Unauth. | 6.1 |
| 2023-08-30 | CVE-2023-32746 | Unspecified vulnerability in Woocommerce Brands 1.6.45 Auth. | 5.4 |
| 2023-08-30 | CVE-2023-32793 | Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0/2.0.0 Auth. | 5.4 |
| 2023-08-30 | CVE-2023-32801 | Unspecified vulnerability in Woocommerce Composite products 8.7.5 Unauth. | 6.1 |
| 2023-08-30 | CVE-2023-32802 | Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0 Unauth. | 6.1 |
| 2023-08-25 | CVE-2023-32575 | Unspecified vulnerability in Woocommerce Auth. | 4.8 |
| 2023-08-05 | CVE-2023-37873 | Unspecified vulnerability in Woocommerce Shipping multiple Addresses Unauth. | 6.1 |
| 2023-07-31 | CVE-2023-3507 | Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0/2.0.0 The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack | 6.5 |
| 2023-07-31 | CVE-2023-3508 | Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0/2.0.0 The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions, which could allow attackers to make logged in admins email pre-orders customer, change the released date, mark all pre-orders of a specific product as complete or cancel via CSRF attacks | 6.5 |
| 2023-06-22 | CVE-2023-35918 | Unspecified vulnerability in Woocommerce Bulk Stock Management Unauth. | 6.1 |