WooCommerce

Records89All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high40CVSS 7.0–8.9

Exploited now

WooCommerce records in CISA KEV

No WooCommerce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Woocommerce 16 records MEDIUM Automatewoo 7 records MEDIUM Shipping Multiple Addresses 4 records LOW Woocommerce Pre-orders 4 records MEDIUM Returns And Warranty Requests 3 records LOW Stripe Payment Gateway 3 records MEDIUM Box Office 2 records LOW Paypal Checkout Payment Gateway 2 records LOW

Records

7 records in Automatewoo · all components

TI-2023-16477 CVE-2023-33318 · GHSA-ww4x-rv34-3576

WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload

MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00814 Published 2023-12-20 No fix listed CWE-434

TI-2023-16011 CVE-2023-32745 · GHSA-rjrx-p9mf-3xj9

WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2023-11-09 No fix listed CWE-352

TI-2023-18352 CVE-2023-36513 · GHSA-fjrx-r447-32c8

WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-07-17 No fix listed CWE-352

TI-2023-16489 CVE-2023-33330 · GHSA-wmf3-hwpg-q9c8

WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection

LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.50.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00644 Published 2023-12-20 No fix listed CWE-89

TI-2023-16475 CVE-2023-33316 · GHSA-9hf8-4956-3qcv

WordPress WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-05-28 No fix listed CWE-352

TI-2023-16009 CVE-2023-32743 · GHSA-2vhm-2m7v-5x2c

WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to SQL Injection

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.1.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00615 Published 2023-12-20 No fix listed CWE-89

TI-2023-16478 CVE-2023-33319 · GHSA-9vw6-9gf6-x43j

WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-05-28 No fix listed CWE-79

Open these records in search →

Critical	7
High	40
Medium	42
Low	0
No CVSS	0