Vendors / WooCommerce Records 89 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7
CVSS high 40
Exploited now WooCommerce records in CISA KEV No WooCommerce vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00309 · Published 2023-07-17 · No fix listed CWE-352
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00382 · Published 2023-08-05 · No fix listed CWE-79
Priority LOW 30
Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00545 · Published 2023-12-21 · No fix listed CWE-639
Priority LOW 24
Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3.8.9.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00314 · Published 2024-06-14 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
7 40 42 0 0
THREATIST.IORead the docs