Woo
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WooCommerce Warranty Requests | 3 | – | Jun 19, 2024 |
| WooCommerce Product Vendors | 2 | – | Jun 11, 2024 |
| WooCommerce Ship to Multiple Addresses | 2 | – | Jun 19, 2024 |
| AutomateWoo | 1 | – | Jun 19, 2024 |
| WooCommerce Box Office | 1 | – | Jun 9, 2024 |
| WooCommerce Subscriptions | 1 | – | Dec 31, 2024 |
| WooCommerce Canada Post Shipping | 1 | – | Jun 11, 2024 |
Exploited and recent CVEs
- CVE-2023-50850 WordPress Woo Subscriptions plugin < 5.8.0 - Broken Access Control vulnerability 0.4%
- CVE-2023-37872 WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.5 - Broken Access Control vulnerability 0.5%
- CVE-2023-36512 WordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerability 0.4%
- CVE-2023-37870 WordPress WooCommerce Warranty Requests plugin <= 2.1.9 - Broken Access Control vulnerability 0.4%
- CVE-2023-51495 WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability 0.4%
- CVE-2023-51496 WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability 0.3%
- CVE-2023-51497 WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.9 - Broken Access Control vulnerability 0.3%
- CVE-2023-51498 WordPress WooCommerce Canada Post Shipping plugin <= 2.8.3 - Broken Access Control vulnerability 0.4%
- CVE-2023-52186 WordPress WooCommerce Product Vendors plugin <= 2.2.2 - Unauthenticated Broken Access Control vulnerability 0.3%
- CVE-2023-34003 WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability 0.3%
- CVE-2023-51494 WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability 0.4%