Where
-Infinity
0

Trending

Last week
Last month
Last year

WooCommerceProduct Specifications for Woocommerce <= 0.8.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attribute/Group Creation, Modification, and Deletion via 'dwps_modify_groups' and 'dwps_modify_attributes' AJAX Actions

Risk 22
Severity
4.3
First published (updated )
CVE-2026-11364

BleepingComputerWooCommerce admins targeted by fake security patches that hijack sites

First published (updated )
News
BleepingComputer

WooCommerce WordPress Plugineasy-broken-link-checker <= 9.0.2 - Admin+ Stored XSS

Risk 24
Severity
3.5
First published (updated )
CVE-2025-1363

WooCommerce WooCommerce WordPress plugineasy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF

Risk 33
Severity
4.3
First published (updated )
CVE-2025-1362

composer/woocommerce/woocommerceWooCommerce has a Cross-Site Scripting Vulnerability in checkout & registration forms

Risk 35
Severity
5.4
First published (updated )
CVE-2024-37297
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WooCommerce WooCommerce WordPressWooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion

Risk 22
Severity
4.3
First published (updated )
CVE-2022-0775

WooCommerce Woosidebars WordpressWooSidebars Plugin class-woo-sidebars.php enable_custom_post_sidebars redirect

Risk 38
Severity
6.1
First published (updated )
CVE-2015-10114

WooCommerce Wooframework Branding WordpressWooFramework Branding Plugin wooframework-branding.php admin_screen_logic redirect

Risk 38
Severity
6.1
First published (updated )
CVE-2015-10112

WooCommerce WooCommerce WordPressWooCommerce < 6.6.0 - Admin+ Stored HTML Injection

Risk 29
Severity
4.8
First published (updated )
CVE-2022-2099

WooCommerce Persian-woocommerce WordpressPersian Woocommerce <= 5.8.0 - Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2021-24940
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WooCommerce WooCommerce WordPressBlind SQL Injection possible via Authenticated Web-hook Search API Endpoint

Risk 30
Severity
4.9
First published (updated )
CVE-2021-32790

composer/woocommerce/woocommerceWoocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS)

Risk 30
Severity
4.8
First published (updated )
CVE-2021-24323

composer/woocommerce/woocommerceThe WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbi…

Risk 28
Severity
5.3
First published (updated )
CVE-2020-29156

WooCommerce Nab Transact WordpressAn issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress…

Risk 43
Severity
7.5
First published (updated )
CVE-2020-11497

composer/woocommerce/woocommerceCSRF, XSS

Risk 80
Severity
8.8
First published (updated )
CVE-2019-20891
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WooCommerce WooCommerce WordPressXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2019-9168

Automattic Woocommerce WordpressCode Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2017-18356

WooCommerce WooCommerce WordPressPath Traversal

Risk 60
Severity
8.1
First published (updated )
CVE-2018-20714

WooCommerce WooCommerce WordPressXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2015-2329

WooCommerce WooCommerce WordPressXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2016-10112
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Woothemes Woocommerce WordpressXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2015-2069

Woothemes Woocommerce Plugin WordpressXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2014-6313

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203