Skip to content
OpenAdvisories

Vendor

woocommerce

51 known vulnerabilities.

Products

WooCommerce Stripe Payment Gateway 5 AutomateWoo 5 Product Vendors 3 Shipping Multiple Addresses 3 woocommerce 3 WooCommerce PayPal Payments 3 WooCommerce Follow-Up Emails (AutomateWoo) 2 Product Add-Ons 2 WooCommerce Square 2 WooCommerce Brands 2 WooCommerce Pre-Orders 2 WooCommerce Box Office 2 WooCommerce Bookings 2 Woo Subscriptions 1 WooCommerce Smart Coupons 1 WooCommerce One Page Checkout 1 Bulk Stock Management 1 WooCommerce Product Vendors 1 Google for WooCommerce 1 Canada Post Shipping Method 1 Product Recommendations 1 Returns and Warranty Requests 1 WooCommerce Order Barcodes 1 GoCardless 1 Composite Products 1 WooCommerce Shipping Per Product 1 WooPayments: Integrated WooCommerce Payments 1 woocommerce-gutenberg-products-block 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-50972

    WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php

    WooCommerce 7.1.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary PHP code by injecting shell commands through the product-type parameter. Attackers can send requests to the class-wc-meta-box-product-images.php endpoi…

    woocommerce woocommerce Web / CMS
  • Critical 9.9
    CVE-2023-33318

    WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload

    Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40.

    woocommerce AutomateWoo