How many woocommerce woocommerce/woocommerce CVEs are in CISA KEV?

None of woocommerce woocommerce/woocommerce's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of woocommerce woocommerce/woocommerce are affected?

12 distinct woocommerce woocommerce/woocommerce versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in woocommerce woocommerce/woocommerce CVEs?

woocommerce woocommerce/woocommerce's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-116 (Improper Encoding or Escaping of Output), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-639 (Authorization Bypass Through User-Controlled Key).

What is the average severity of woocommerce woocommerce/woocommerce CVEs?

The average CVSS base score across woocommerce woocommerce/woocommerce's scored CVEs is 5.8.

woocommerce woocommerce/woocommerce Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: woocommerce woocommerce/woocommerce vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

woocommerce woocommerce/woocommerce Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

woocommerce woocommerce/woocommerce has 5 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 5.8.

Severity and exploitation

How the CVSS severity of woocommerce woocommerce/woocommerce's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of woocommerce woocommerce/woocommerce's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3 of woocommerce woocommerce/woocommerce's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every woocommerce woocommerce/woocommerce version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.6.51 CVE
< 4.7.01 CVE
< 5.2.01 CVE
< 6.6.01 CVE
8.8.0 <= v < 8.8.51 CVE
8.9.0 <= v < 8.9.31 CVE

Fixed in

3.6.51 CVE
4.7.01 CVE
5.2.01 CVE
6.6.01 CVE
8.8.51 CVE

Common weakness types

The CWE weakness categories most often found in woocommerce woocommerce/woocommerce CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many woocommerce woocommerce/woocommerce CVEs were published each year.

2020

2021

2022

2024

Other woocommerce products

Browse vulnerabilities for other products by woocommerce.

woocommerce20 CVEs AutomateWoo7 CVEs woocommerce_customers_manager5 CVEs WooCommerce Stripe Payment Gateway5 CVEs Product Vendors4 CVEs Shipping Multiple Addresses4 CVEs woocommerce pre-orders4 CVEs

Frequently asked questions

Common questions about woocommerce woocommerce/woocommerce vulnerabilities.

How many CVEs does woocommerce woocommerce/woocommerce have?: woocommerce woocommerce/woocommerce has 5 published CVE records since 2020.
How many woocommerce woocommerce/woocommerce CVEs are in CISA KEV?: None of woocommerce woocommerce/woocommerce's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for woocommerce woocommerce/woocommerce vulnerabilities?: Yes — 3 of woocommerce woocommerce/woocommerce's CVEs have a known public exploit.
Which versions of woocommerce woocommerce/woocommerce are affected?: 12 distinct woocommerce woocommerce/woocommerce versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in woocommerce woocommerce/woocommerce CVEs?: woocommerce woocommerce/woocommerce's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-116 (Improper Encoding or Escaping of Output), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-639 (Authorization Bypass Through User-Controlled Key).
What is the average severity of woocommerce woocommerce/woocommerce CVEs?: The average CVSS base score across woocommerce woocommerce/woocommerce's scored CVEs is 5.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track woocommerce woocommerce/woocommerce vulnerabilities

Get an alert for each new woocommerce woocommerce/woocommerce CVE, with AI-written analysis and remediation steps.

Create an account See pricing