Known vulnerabilities in the WooCommerce plugin

• Woocommerce - Security Vulnerability (CVE-2026-48888) HIGH 2026-09-08
• Woocommerce - SQL Injection (CVE-2026-57777) HIGH 2026-09-04
• Woocommerce - Remote Code Execution (CVE-2022-50972) CRITICAL 2026-06-20
• WooCommerce - Cross-Site Request Forgery (CSRF) (CVE-2026-3589) HIGH 2026-03-06
• WooCommerce - Remote Code Execution (CVE-2026-28132) MEDIUM 2026-02-26
• WooCommerce - Broken Access Control (CVE-2026-24999) MEDIUM 2026-02-19
• WooCommerce - PHP Object Injection (CVE-2026-22333) HIGH 2026-02-19
• WooCommerce - Information Disclosure (CVE-2026-24992) MEDIUM 2026-02-03
• WooCommerce - Broken Access Control (CVE-2026-24625) MEDIUM 2026-01-23
• WooCommerce - Broken Access Control (CVE-2026-24606) MEDIUM 2026-01-23
• WooCommerce - Broken Access Control (CVE-2026-24585) MEDIUM 2026-01-23
• WooCommerce - Broken Access Control (CVE-2026-24581) MEDIUM 2026-01-23
• WooCommerce - Broken Access Control (CVE-2026-24583) MEDIUM 2026-01-23
• WooCommerce - Broken Access Control (CVE-2026-24562) MEDIUM 2026-01-23
• WooCommerce - Information Disclosure (CVE-2026-24553) MEDIUM 2026-01-23
• WooCommerce - Cross-Site Scripting (XSS) (CVE-2026-24526) MEDIUM 2026-01-23
• WooCommerce - Broken Access Control (CVE-2026-24366) MEDIUM 2026-01-22
• WooCommerce - Cross-Site Request Forgery (CSRF) (CVE-2026-24365) MEDIUM 2026-01-22
• WooCommerce - Broken Access Control (CVE-2026-22461) MEDIUM 2026-01-22
• Woocommerce - Cross-Site Scripting (XSS) (CVE-2025-11821) MEDIUM 2025-11-11
• WooCommerce - Information Disclosure (CVE-2023-7320) MEDIUM 2025-10-29
• Woocommerce - Cross-Site Scripting (XSS) (CVE-2025-49042) MEDIUM 2025-10-29
• WooCommerce - Cross-Site Request Forgery (CSRF) (CVE-2025-57977) HIGH 2025-09-22
• Woocommerce - Cross-Site Scripting (XSS) (CVE-2025-5062) MEDIUM 2025-05-22
• WooCommerce - Broken Access Control (CVE-2025-31843) MEDIUM 2025-04-01
• Woocommerce - Cross-Site Scripting (XSS) (CVE-2025-26762) MEDIUM 2025-03-27
• WooCommerce - Information Disclosure (CVE-2025-30609) MEDIUM 2025-03-24
• Woocommerce - Security Vulnerability (CVE-2024-9944) MEDIUM 2024-10-15
• Woocommerce - Cross-Site Scripting (XSS) (CVE-2024-37297) MEDIUM 2024-06-12
• WooCommerce - Broken Access Control (CVE-2024-32517) MEDIUM 2024-04-17

Browse the full threat database