Exposure of WooCommerce

Ecommerce, WordPress plugins
3,083
exposure score
553,677
sites use
0
exploited
207
critical

CVEs

2,653 results
CVE-2021-4379MEDIUMWooCommerce Multi Currency <= 2.1.17 - Missing AuthorizationEPSS 0.8%CVE-2022-46809MEDIUMWordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV InjectionEPSS 0.8%CVE-2026-87855CRITICALJTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' MethodEPSS 0.8%CVE-2024-13513CRITICALOliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege EscalationEPSS 0.8%CVE-2026-14955MEDIUMCheckout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' ParameterEPSS 0.8%CVE-2022-1470—Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-2090—Woo Discount Rules < 2.4.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1546—WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2024-10804HIGHUltimate Video Player <= 10.0 - Unauthenticated Arbitrary File DownloadEPSS 0.8%CVE-2025-12000MEDIUMWPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path TraversalEPSS 0.8%CVE-2022-2556—MailChimp for Woocommerce < 2.7.2 - Admin+ SSRFEPSS 0.8%CVE-2021-39314MEDIUMWooCommerce EnvioPack <= 1.2 Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-39308MEDIUMWooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-39309MEDIUMParsian Bank Gateway for Woocommerce <= 1.0 Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24999—Booster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing ModuleEPSS 0.8%CVE-2021-25000—Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General ModuleEPSS 0.8%CVE-2021-25001—Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds ModuleEPSS 0.8%CVE-2024-1173HIGHWP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL InjectionEPSS 0.8%CVE-2026-6020HIGHShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST APIEPSS 0.8%CVE-2023-47777MEDIUMWordPress WooCommerce and WooCommerce Blocks plugins - Auth. Cross-Site Scripting (XSS) vulnerabilityEPSS 0.8%