Automattic WooCommerce

• CVE-2026-106608 High 7.2 WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability 0.3%
• CVE-2026-48888 High 7.5 WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability 0.5%
• CVE-2026-57777 High 7.6 WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability 0.4%
• CVE-2026-3589 High 7.5 WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF 0.1%
• CVE-2025-15033 Medium 6.5 WooCommerce - Subscriber/Customer+ Order Data Disclosure 0.3%
• CVE-2023-7320 Medium 5.3 WooCommerce <= 7.8.2 - Sensitive Information Exposure 0.3%
• CVE-2025-49042 Medium 5.9 WordPress WooCommerce plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-5062 Medium 6.1 WooCommerce <= 9.4.2 - PostMessage-Based Cross-Site Scripting 0.5%
• CVE-2025-26762 Medium 5.9 WordPress WooCommerce plugin <= 9.7.0 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2024-9944 Medium 5.3 WooCommerce <= 9.0.2 - Unauthenticated HTML Injection 0.6%
• CVE-2024-39666 Medium 5.9 WordPress WooCommerce plugin <= 9.1.2 - Cross Site Scripting (XSS) vulnerability 0.4%
• CVE-2024-35777 Low 3.5 WordPress WooCommerce plugin <= 8.9.2 - Content Injection vulnerability 0.4%
• CVE-2024-22155 Medium 4.3 WordPress WooCommerce plugin <= 8.5.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2023-52222 Medium 4.3 WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
• CVE-2023-47777 Medium 6.5 WordPress WooCommerce and WooCommerce Blocks plugins - Auth. Cross-Site Scripting (XSS) vulnerability 0.8%
• CVE-2021-24323 Unrated Woocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS) 0.7%