How many CVEs does woocommerce woocommerce have?

woocommerce woocommerce has 20 published CVE records since 2017.

How many woocommerce woocommerce CVEs are in CISA KEV?

None of woocommerce woocommerce's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for woocommerce woocommerce vulnerabilities?

Yes — 7 of woocommerce woocommerce's CVEs have a known public exploit.

Which versions of woocommerce woocommerce are affected?

389 distinct woocommerce woocommerce versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in woocommerce woocommerce CVEs?

woocommerce woocommerce's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical woocommerce woocommerce vulnerabilities are there?

woocommerce woocommerce has 1 critical and 7 high-severity CVEs.

What is the average severity of woocommerce woocommerce CVEs?

The average CVSS base score across woocommerce woocommerce's scored CVEs is 6.5.

woocommerce Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: woocommerce vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

woocommerce Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

woocommerce has 20 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

Severity and exploitation

How the CVSS severity of woocommerce's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High7

Medium12

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of woocommerce's CVEs are currently listed in CISA's KEV catalog.

Public exploits

7 of woocommerce's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every woocommerce version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.014 CVEs
1.0.114 CVEs
1.0.214 CVEs
1.0.314 CVEs
1.114 CVEs
1.1.114 CVEs
1.1.214 CVEs
1.1.314 CVEs
1.214 CVEs
1.2.114 CVEs
1.2.214 CVEs
1.2.314 CVEs

Common weakness types

The CWE weakness categories most often found in woocommerce CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many woocommerce CVEs were published each year.

2017

2018

2019

2020

2021

2022

2023

Other woocommerce products

Browse vulnerabilities for other products by woocommerce.

AutomateWoo7 CVEs woocommerce_customers_manager5 CVEs WooCommerce Stripe Payment Gateway5 CVEs woocommerce/woocommerce5 CVEs Product Vendors4 CVEs Shipping Multiple Addresses4 CVEs woocommerce pre-orders4 CVEs

Frequently asked questions

Common questions about woocommerce vulnerabilities.

How many CVEs does woocommerce woocommerce have?: woocommerce woocommerce has 20 published CVE records since 2017.
How many woocommerce woocommerce CVEs are in CISA KEV?: None of woocommerce woocommerce's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for woocommerce woocommerce vulnerabilities?: Yes — 7 of woocommerce woocommerce's CVEs have a known public exploit.
Which versions of woocommerce woocommerce are affected?: 389 distinct woocommerce woocommerce versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in woocommerce woocommerce CVEs?: woocommerce woocommerce's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical woocommerce woocommerce vulnerabilities are there?: woocommerce woocommerce has 1 critical and 7 high-severity CVEs.
What is the average severity of woocommerce woocommerce CVEs?: The average CVSS base score across woocommerce woocommerce's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track woocommerce vulnerabilities

Get an alert for each new woocommerce CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Fixed in

0c8e3dd875c2796a3fec176a4c71c04f6770c0161 CVE
0dbfcc1d64bd883eece73ba6e3f18e15673700a01 CVE
0e9888305d0cb9557e58f558526ab11cb3bcc4b41 CVE
10aedc7c9be0aa7504ff3ef9401eac7eb51e6e951 CVE
1244530ee57d348cf8b558fe2c312ab0989c70e31 CVE
139515fe64e7920d71946fad426d70c9c262e4131 CVE
1b144ae839f0d86a81d2b2f99ccd84de858b50d31 CVE
1fa9d156cd63afb44501675c3e4ce2f4768d44af1 CVE
2.3.61 CVE
2a9cab7be3c183fbb781b141fa45946341087e661 CVE
3.2.41 CVE
3.3.61 CVE
3.4.61 CVE
3.4.81 CVE
3.5.51 CVE
3.5.91 CVE
3.6.51 CVE
3.6.61 CVE
3.7.21 CVE
3.8.21 CVE
3.9.41 CVE
359d113018a54d0d3fba14935473639db02ee5621 CVE
3eeb0f220dfe1088e7014f05d6ca272f3656b2651 CVE
3f869efe06b32462cea259b836f48933de3d76df1 CVE
4.0.21 CVE
4.1.21 CVE
4.2.31 CVE
4.3.41 CVE
4.4.21 CVE
4.5.31 CVE
4.6.31 CVE
4.7.01 CVE
4.7.21 CVE
4.8.11 CVE
4.9.31 CVE
461163b785c4635c24c7acbbf8b1daec2767adec1 CVE
4cbb4a882c60b44ccb0b156aaae6d94167e423011 CVE
4dead9083a33ea3e4887341ac36712c5babf281b1 CVE
4fec0b34927089c6a84b46aed363d054a0fe77301 CVE
5.0.11 CVE
5.1.11 CVE
5.2.01 CVE
5.2.31 CVE
5.3.11 CVE
5.4.21 CVE
5.5.11 CVE
5d642df1e145e5f33cbda31e6d97c969df120e421 CVE
6.2.11 CVE
6.6.01 CVE
62fac9f0614397d58451e94da961de4d306e83531 CVE
67a8bdbc73cd880226172cee358523cff8fb50801 CVE
74d5679ff631ba7ac957ed4cee411147de47ff571 CVE
7b4211276162f7e44868847b72eba655d7b93f521 CVE
7f2346ebabc55383fcac703841acc3e1bb47a8851 CVE
7fd068fee42f112a3c8709e68bbdfd9bf354300c1 CVE
8.8.51 CVE
8.9.31 CVE
87f2edbbe160b8668069c9f0def573d6baaa4b121 CVE
9.1.01 CVE
9.3.41 CVE
9.4.31 CVE
901dbd2d29ca87aaeaebaa486981f65da1c1a52c1 CVE
90def7c366a63a2d7c522a34cf7992939eedd1451 CVE
915e32a42762916b745a7e663c8b69a698da8b671 CVE
9af8cb15be530f0d195cd671ae07e549150e87bc1 CVE
a1ea4258250b0b434508fbfb027be5ac65718eb11 CVE
ae7f2a691720cf78744dacde9d12b586ae5f01b11 CVE
b9f31d8050f5d84704b949625d180eaf8d00d87c1 CVE
c38e869e7d64e7e85031ba2a26bdb1ceadde6ed61 CVE
c8ed6e03848995c348a3d6a8f27c136cc011bb211 CVE
d5bafc3fd75c40600b7f4f9bdfc4e99ae33d19811 CVE
e5696a0d99c0f6cc4202ea4c16fd35a0875f05091 CVE
ead0e524eec4ff54c14b20810d497fd8cc1cd3e41 CVE
f00c4dcd76330f201b3b7d6b5293ac8bb3e6dd2c1 CVE

woocommerce Vulnerabilities