Exposición de WooCommerce

Ecommerce, WordPress plugins
3083
score de exposición
553.677
sitios usan
0
en explotación
207
críticos

CVEs

2653 resultados
CVE-2026-18391CRITICALWooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object InjectionEPSS 1.0%CVE-2026-15667HIGHEventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' ParameterEPSS 1.0%CVE-2022-4547HIGHConditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLiEPSS 1.0%CVE-2025-12975HIGHCTX Feed – WooCommerce Product Feed Manager <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin InstallationEPSS 1.0%CVE-2023-2256—Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site ScriptingEPSS 1.0%CVE-2024-10486MEDIUMGoogle for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info FileEPSS 0.9%CVE-2022-3908MEDIUMHelloprint < 1.4.7 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2026-76801HIGHFireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege EscalationEPSS 0.9%CVE-2021-34664MEDIUMMoova for WooCommerce <= 3.5 Reflected Cross-Site ScriptingEPSS 0.9%CVE-2021-38341MEDIUMWooCommerce Payment Gateway Per Category <= 2.0.10 Reflected Cross-Site ScriptingEPSS 0.9%CVE-2024-10626HIGHWooCommerce Support Ticket System <= 17.7 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.9%CVE-2022-41623HIGHWordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerabilityEPSS 0.9%CVE-2025-5391HIGHWooCommerce Purchase Orders <= 1.0.2 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.9%CVE-2022-2429MEDIUMUltimate SMS Notifications for WooCommerce <= 1.4.1 - CSV InjectionEPSS 0.9%CVE-2026-16777MEDIUMStore Exporter <= 2.8.0 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read and Arbitrary File Deletion via 'filename' ParameterEPSS 0.9%CVE-2026-14281CRITICALAutomation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' ParameterEPSS 0.9%CVE-2022-4106HIGHWholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File DownloadEPSS 0.9%CVE-2022-30998CRITICALWordPress Homepage Product Organizer for WooCommerce plugin <= 1.1 - Multiple Authenticated SQL Injection (SQLi) vulnerabilitiesEPSS 0.9%CVE-2024-8393MEDIUMWoocommerce Blocks – Woolook <= 1.7.0 - Authenticated (Admin+) Local File InclusionEPSS 0.9%CVE-2022-40194MEDIUMWordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Sensitive Information Disclosure vulnerabilityEPSS 0.9%