Advisories · Technology
WooCommerce.
Every CVE that names WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php
- WooCommerce
- Code injection
- CVSS 4.9 Medium
WooCommerce < 8.6 - Contributor+ Private/Draft Products Access
- WooCommerce
- CVSS 4.3 Medium
WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion
- WooCommerce
- CVSS 4.9 Medium
Blind SQL Injection possible via Authenticated Web-hook Search API Endpoint
- woocommerce
- SQL injection