Doofinder
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Doofinder for WooCommerce | 3 | – | Nov 4, 2026 |
| Doofinder WP & WooCommerce Search | 3 | – | Jan 5, 2024 |
| Doofinder | 1 | – | Nov 9, 2024 |
Exploited and recent CVEs
- CVE-2026-56065 WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerability 0.2%
- CVE-2026-39542 WordPress Doofinder for WooCommerce plugin <= 2.10.13 - Sensitive Data Exposure vulnerability 0.2%
- CVE-2024-51697 WordPress Doofinder plugin <= 0.5.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-25596 WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-51678 WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control 0.2%
- CVE-2023-40602 WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open Redirection 0.5%
- CVE-2023-49185 WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS) 0.4%