Woo
14 CVEs across 8 Woo products. Browse Woo vulnerabilities, severities, and proof-of-concept exploits.
Woo products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-50850 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2017-20193 | Medium | 4.7 | 2024-10-16 | The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions up to, and including, 2.0.35 due to insu… |
CVE-2023-37872 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3… |
CVE-2023-37870 | High | 8.1 | 2024-06-19 | Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.1.9. |
CVE-2023-36512 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in Woo AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.5. |
CVE-2023-51497 | Medium | 5.4 | 2024-06-14 | Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3… |
CVE-2023-51496 | Medium | 5.3 | 2024-06-14 | Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7. |
CVE-2023-51495 | Medium | 6.5 | 2024-06-14 | Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7. |
CVE-2023-51498 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Woo WooCommerce Canada Post Shipping.This issue affects WooCommerce Canada Post Shipping: from n/a through 2.8.3. |
CVE-2023-52186 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.2. |
CVE-2023-34003 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in Woo WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.1.51. |
CVE-2023-51494 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.1. |
CVE-2023-33331 | High | 8.5 | 2023-12-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This iss… |
CVE-2023-35879 | High | 7.6 | 2023-10-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This iss… |