Read the docs

Doofinder

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Doofinder records in CISA KEV

No Doofinder vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Doofinder 4 records LOW

Records

7 records

TI-2026-84980 CVE-2026-56065 · GHSA-2rjp-mrq2-jh6r

Sensitive data exposure in Doofinder for WooCommerce WordPress plugin

Priority LOW 32

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Do…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00245 Published 2026-11-04 No fix listed CWE-538
TI-2023-26844 CVE-2023-49185 · GHSA-2cj2-3g3v-rx62

WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinder WP & WooCommerce Search allows Reflected XSS.This issue affects Doofinder WP & WooCommerce Search:…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00403 Published 2023-12-15 No fix listed CWE-79
TI-2026-28516 CVE-2026-39542 · GHSA-vv3p-7ggx-8fch

WordPress Doofinder for WooCommerce plugin <= 2.10.13 - Sensitive Data Exposure vulnerability

Priority LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0025 Published 2026-04-08 No fix listed CWE-201
TI-2024-16824 CVE-2024-25596 · GHSA-4q5v-9h2g-q5rg

WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2024-03-15 No fix listed CWE-79
Open these records in search →