Woo

Products

ProductCVEsExploitedLatest
WooCommerce Warranty Requests3–Jun 19, 2024
WooCommerce Product Vendors2–Jun 11, 2024
WooCommerce Ship to Multiple Addresses2–Jun 19, 2024
AutomateWoo1–Jun 19, 2024
WooCommerce Box Office1–Jun 9, 2024
WooCommerce Subscriptions1–Dec 31, 2024
WooCommerce Canada Post Shipping1–Jun 11, 2024

Exploited and recent CVEs

  • CVE-2023-50850 Medium 4.3 WordPress Woo Subscriptions plugin < 5.8.0 - Broken Access Control vulnerability 0.4%
  • CVE-2023-37872 Medium 6.5 WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.5 - Broken Access Control vulnerability 0.5%
  • CVE-2023-36512 Medium 6.5 WordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerability 0.4%
  • CVE-2023-37870 High 8.1 WordPress WooCommerce Warranty Requests plugin <= 2.1.9 - Broken Access Control vulnerability 0.4%
  • CVE-2023-51495 Medium 6.5 WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability 0.4%
  • CVE-2023-51496 Medium 5.3 WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability 0.3%
  • CVE-2023-51497 Medium 5.4 WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.9 - Broken Access Control vulnerability 0.3%
  • CVE-2023-51498 Medium 5.3 WordPress WooCommerce Canada Post Shipping plugin <= 2.8.3 - Broken Access Control vulnerability 0.4%
  • CVE-2023-52186 Medium 5.3 WordPress WooCommerce Product Vendors plugin <= 2.2.2 - Unauthenticated Broken Access Control vulnerability 0.3%
  • CVE-2023-34003 Medium 6.5 WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability 0.3%
  • CVE-2023-51494 Medium 5.3 WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability 0.4%