Vulnerabilities > Woocommerce > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-25 | CVE-2023-32575 | Cross-site Scripting vulnerability in Woocommerce Auth. | 4.8 |
| 2023-08-05 | CVE-2023-37873 | Cross-site Scripting vulnerability in Woocommerce Shipping multiple Addresses Unauth. | 6.1 |
| 2023-07-31 | CVE-2023-3507 | Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0/2.0.0 The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack | 6.5 |
| 2023-07-31 | CVE-2023-3508 | Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0/2.0.0 The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions, which could allow attackers to make logged in admins email pre-orders customer, change the released date, mark all pre-orders of a specific product as complete or cancel via CSRF attacks | 6.5 |
| 2023-06-22 | CVE-2023-35918 | Cross-site Scripting vulnerability in Woocommerce Bulk Stock Management Unauth. | 6.1 |
| 2023-06-05 | CVE-2015-10115 | Open Redirect vulnerability in Woocommerce Sidebar Manager to Woosidebars Converter A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.1.1 on WordPress. | 6.1 |
| 2023-06-05 | CVE-2015-10113 | Open Redirect vulnerability in Woocommerce Wooframework Tweaks 1.0.0/1.0.1 A vulnerability classified as problematic was found in WooFramework Tweaks Plugin up to 1.0.1 on WordPress. | 6.1 |
| 2023-06-05 | CVE-2015-10114 | Open Redirect vulnerability in Woocommerce Woosidebars A vulnerability, which was classified as problematic, has been found in WooSidebars Plugin up to 1.4.1 on WordPress. | 6.1 |
| 2023-06-05 | CVE-2015-10112 | Open Redirect vulnerability in Woocommerce Wooframework Branding A vulnerability classified as problematic has been found in WooFramework Branding Plugin up to 1.0.1 on WordPress. | 6.1 |
| 2023-05-28 | CVE-2023-33319 | Cross-site Scripting vulnerability in Woocommerce Automatewoo Unauth. | 6.1 |