Skip to content
OpenAdvisories

Vendor

Doofinder

7 known vulnerabilities.

Products

Doofinder WP & WooCommerce Search 3 Doofinder for WooCommerce 3 Doofinder 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-39542

    WordPress Doofinder for WooCommerce plugin <= 2.10.13 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from n/a through <= 2.10.13.

    Doofinder Doofinder for WooCommerce Web / CMS
  • Medium 5.9
    CVE-2024-25596

    WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2.1.8.

    Doofinder Doofinder for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2023-51678

    WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control

    Cross-Site Request Forgery (CSRF) vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33.

    Doofinder Doofinder WP & WooCommerce Search Web / CMS
  • Medium 4.7
    CVE-2023-40602

    WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open Redirection

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49.

    Doofinder Doofinder WP & WooCommerce Search Web / CMS