Woo

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Woo records in CISA KEV

No Woo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Product Vendors 4 records MEDIUM

Records

14 records

TI-2023-19309 CVE-2023-37870 · GHSA-7228-8qfm-pv8c

WordPress WooCommerce Warranty Requests plugin <= 2.1.9 - Broken Access Control vulnerability

HIGH 70

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.1.9.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00435 Published 2024-06-19 No fix listed CWE-862

TI-2023-17950 CVE-2023-35879 · GHSA-qgfp-cppw-mc67

WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injection

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.78.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00732 Published 2023-10-31 No fix listed CWE-89

TI-2023-28146 CVE-2023-51494 · GHSA-c9vr-xfgm-jgh2

WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00365 Published 2024-06-09 No fix listed CWE-862

TI-2023-16490 CVE-2023-33331 · GHSA-368x-vqh8-wg8x

WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injection

LOW 39

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00929 Published 2023-12-18 No fix listed CWE-89

TI-2023-18351 CVE-2023-36512 · GHSA-mxhm-55rx-j7v5

WordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in Woo AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00386 Published 2024-06-19 No fix listed CWE-862

TI-2023-16870 CVE-2023-34003 · GHSA-789r-f888-xv3f

WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability

LOW 35

Missing Authorization vulnerability in Woo WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.1.51.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00348 Published 2024-06-09 No fix listed CWE-862

TI-2023-28614 CVE-2023-52186 · GHSA-86xr-hhp2-92cj

WordPress WooCommerce Product Vendors plugin <= 2.2.2 - Unauthenticated Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2024-06-11 No fix listed CWE-862

TI-2023-28150 CVE-2023-51498 · GHSA-9h54-f8p4-357g

WordPress WooCommerce Canada Post Shipping plugin <= 2.8.3 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Woo WooCommerce Canada Post Shipping.This issue affects WooCommerce Canada Post Shipping: from n/a through 2.8.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00381 Published 2024-06-11 No fix listed CWE-862

TI-2023-28148 CVE-2023-51496 · GHSA-f2g5-gjh6-fcvg

WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2024-06-14 No fix listed CWE-862

TI-2023-28147 CVE-2023-51495 · GHSA-cmm9-g859-437v

WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00355 Published 2024-06-14 No fix listed CWE-862

TI-2023-19311 CVE-2023-37872 · GHSA-vq29-m49g-76x9

WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.5 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3.8.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00494 Published 2024-06-19 No fix listed CWE-862

TI-2017-14259 CVE-2017-20193 · GHSA-whqq-5qx6-vwwf

Product Vendors <= 2.0.35 - Reflected Cross Site Scripting

LOW 27

The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions up to, and including, 2.0.35 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00417 Published 2024-10-16 Fixed in 2.0.36 CWE-79

TI-2023-28149 CVE-2023-51497 · GHSA-f45m-62gh-jw4q

WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.9 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3.8.9.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00314 Published 2024-06-14 No fix listed CWE-862

TI-2023-27755 CVE-2023-50850 · GHSA-vj29-vrh9-6589

WordPress Woo Subscriptions plugin < 5.8.0 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Subscriptions: from n/a before 5.8.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00377 Published 2024-12-31 Fixed in 5.8.0 CWE-862

Open these records in search →

Critical	2
High	2
Medium	10
Low	0
No CVSS	0