Vendor
Woo
14 known vulnerabilities in products by Woo, 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-33331 | WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injection | 8.5 | |
| Critical | CVE-2023-35879 | WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injection | 7.6 | |
| High | CVE-2023-37870 | WordPress WooCommerce Warranty Requests plugin <= 2.1.9 - Broken Access Control vulnerability | 8.1 | |
| Medium | CVE-2023-37872 | WooCommerce Ship to Multiple Addresses: Missing Authorization | 6.5 | |
| Medium | CVE-2023-36512 | WordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2023-51495 | WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2023-34003 | WooCommerce Box Office: Missing Authorization | 6.5 | |
| Medium | CVE-2017-20193 | Product Vendors <= 2.0.35 - Reflected Cross Site Scripting | 4.7 | |
| Medium | CVE-2023-51498 | WordPress WooCommerce Canada Post Shipping plugin <= 2.8.3 - Broken Access Control vulnerability | 5.3 | |
| Critical | CVE-2023-51494 | WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability | 5.3 | |
| Medium | CVE-2023-51497 | WooCommerce Ship to Multiple Addresses: Missing Authorization | 5.4 | |
| Medium | CVE-2023-50850 | WordPress Woo Subscriptions plugin < 5.8.0 - Broken Access Control vulnerability | 4.3 | |
| Medium | CVE-2023-51496 | WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability | 5.3 | |
| Medium | CVE-2023-52186 | WooCommerce Product Vendors: Missing Authorization | 5.3 |
Products
| WooCommerce Product Vendors | 4 | 0 |
| Woocommerce Warranty Requests | 3 | 0 |