Vulnerabilities

TI-2026-84980 CVE-2026-56065 · GHSA-2rjp-mrq2-jh6r

Sensitive data exposure in Doofinder for WooCommerce WordPress plugin

LOW 32

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Do…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00245 Published 2026-11-04 No fix listed CWE-538

TI-2026-28516 CVE-2026-39542 · GHSA-vv3p-7ggx-8fch

WordPress Doofinder for WooCommerce plugin <= 2.10.13 - Sensitive Data Exposure vulnerability

LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0025 Published 2026-04-08 No fix listed CWE-201

TI-2024-34611 CVE-2024-51697 · GHSA-5gc8-82w7-wq2h

WordPress Doofinder plugin <= 0.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinder doofinder allows Reflected XSS.This issue affects Doofinder: from n/a through <= 0.5.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00304 Published 2024-11-09 No fix listed CWE-79

TI-2024-16824 CVE-2024-25596 · GHSA-4q5v-9h2g-q5rg

WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2024-03-15 No fix listed CWE-79

TI-2023-28325 CVE-2023-51678 · GHSA-5ghg-77c4-pg6g

WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00229 Published 2024-01-05 No fix listed CWE-352

TI-2023-21400 CVE-2023-40602 · GHSA-f4gp-5rmp-p2pw

WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open Redirection

LOW 28

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00469 Published 2023-12-19 No fix listed CWE-601

TI-2023-26844 CVE-2023-49185 · GHSA-2cj2-3g3v-rx62

WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)