WooCommerce

Records89All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high40CVSS 7.0–8.9

Exploited now

WooCommerce records in CISA KEV

No WooCommerce vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Returns And Warranty Requests · all components

TI-2023-16476 CVE-2023-33317 · GHSA-hm8r-2wq3-2prq

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <= 2.1.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-30 No fix listed CWE-79

TI-2023-28148 CVE-2023-51496 · GHSA-f2g5-gjh6-fcvg

LOW 30

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2024-06-14 No fix listed CWE-862

TI-2023-28147 CVE-2023-51495 · GHSA-cmm9-g859-437v

LOW 29

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00355 Published 2024-06-14 No fix listed CWE-862