<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: automattic-woocommerce</title><description>Every new CVE for automattic-woocommerce.</description><link>https://agentprime.io/</link><item><title>CVE-2026-106608: WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-106608/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-106608/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 10 Oct 2026 17:00:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48888: WordPress WooCommerce plugin &lt; 11.1.0 - Denial of Service Attack vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-48888/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48888/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 07:25:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57777: WordPress WooCommerce plugin &lt; 11.0 - SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-57777/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57777/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 08:12:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3589: WooCommerce &lt; 10.5.3 - Arbitrary Admin User Creation via CSRF</title><link>https://agentprime.io/advisories/CVE-2026-3589/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3589/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Mar 2026 09:11:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-15033: WooCommerce - Subscriber/Customer+ Order Data Disclosure</title><link>https://agentprime.io/advisories/CVE-2025-15033/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15033/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Dec 2025 18:57:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-7320: WooCommerce &lt;= 7.8.2 - Sensitive Information Exposure</title><link>https://agentprime.io/advisories/CVE-2023-7320/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-7320/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 29 Oct 2025 06:45:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-49042: WordPress WooCommerce plugin &lt;= 10.0.2 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-49042/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49042/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 29 Oct 2025 04:50:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-5062: WooCommerce &lt;= 9.4.2 - PostMessage-Based Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2025-5062/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-5062/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 May 2025 03:42:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-26762: WordPress WooCommerce plugin &lt;= 9.7.0 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-26762/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-26762/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Mar 2025 15:52:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-9944: WooCommerce &lt;= 9.0.2 - Unauthenticated HTML Injection</title><link>https://agentprime.io/advisories/CVE-2024-9944/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9944/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Oct 2024 05:31:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-39666: WordPress WooCommerce plugin &lt;= 9.1.2 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-39666/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-39666/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 18 Aug 2024 13:37:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-35777: WordPress WooCommerce plugin &lt;= 8.9.2 - Content Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-35777/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-35777/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jul 2024 09:57:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-22155: WordPress WooCommerce plugin &lt;= 8.5.2 - Cross Site Request Forgery (CSRF) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-22155/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-22155/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 07 Apr 2024 17:56:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-52222: WordPress WooCommerce Plugin &lt;= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)</title><link>https://agentprime.io/advisories/CVE-2023-52222/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-52222/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 08 Jan 2024 18:53:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-47777: WordPress WooCommerce and WooCommerce Blocks plugins - Auth. Cross-Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-47777/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-47777/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Nov 2023 11:56:53 GMT</pubDate><category>CVE</category></item></channel></rss>