cve.bz

automattic woocommerce vulnerabilities in 2024, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 5.9CVE-2024-39666EPSS 0.4%

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 9.1.2.

  2. 3.5CVE-2024-35777EPSS 0.4%

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Automattic WooCommerce allows Content Spoofing.This issue affects WooCommerce: from n/a through 8.9.2.

  3. 4.9CVE-2024-1310EPSS 0.7%

    The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)

  4. 4.3CVE-2024-22155EPSS 0.2%

    Cross-Site Request Forgery (CSRF) vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.5.2.