Skip to content
OpenAdvisories

Package · Packagist

woocommerce/woocommerce

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2019-20891

    WooCommerce Cross-Site Request Forgery (CSRF)

    WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery (CSRF) issue with resultant stored cross-site scripting (XSS) via includes/admin/importers/class-wc-product-csv-importer-controller.php.

    woocommerce/woocommerce Packagist