Read the docs

WooCommerce

Records89All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high40CVSS 7.0–8.9

Exploited now

WooCommerce records in CISA KEV

No WooCommerce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woocommerce 16 records MEDIUM Automatewoo 7 records MEDIUM Shipping Multiple Addresses 4 records LOW Woocommerce Pre-orders 4 records MEDIUM Returns And Warranty Requests 3 records LOW Stripe Payment Gateway 3 records MEDIUM Box Office 2 records LOW Paypal Checkout Payment Gateway 2 records LOW

Records

2 records in Paypal Checkout Payment Gateway · all components

TI-2019-05301 CVE-2019-7441 · GHSA-c394-j3rr-w25m

cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8…

Priority LOW 38

cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchasing an item for lower…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05939 Published 2019-03-20 No fix listed
TI-2019-11171 CVE-2019-14979 · GHSA-mrxg-h5cf-j2qr

cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.17…

Priority LOW 32

cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.17 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchasing an item for lowe…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0109 Published 2019-08-29 No fix listed CWE-20
Open these records in search →