What’s Vulnerable › Products

Automattic Woocommerce vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Automattic Woocommerce version is affected

Latest Automattic Woocommerce vulnerabilities

• CVE-2024-10486 — Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File (CVSS 5.3)
• CVE-2024-1310 — WooCommerce < 8.6 - Contributor+ Private/Draft Products Access (CVSS 4.9)
• CVE-2023-47777 — WordPress WooCommerce and WooCommerce Blocks plugins - Auth. Cross-Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2017-17058 — (CVSS 7.5)