Woocommerce

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWoocommerce (5f8bcbf3-f63a-5ea1-9572-f0b14f837db9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1310 vulnerable 2026-06-08 06:25:39.788340 WooCommerce < 8.6 - Contributor+ Private/Draft Products Access
The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)
Published: 2024-04-15T05:00:03.811Z
Updated: 2024-10-31T15:14:55.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2099 vulnerable 2026-06-08 05:42:50.272585 WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles
Published: 2022-07-17T10:35:52.000Z
Updated: 2024-08-03T00:24:44.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0775 vulnerable 2026-06-08 05:39:10.795220 WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion
The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment
Published: 2024-01-16T15:52:36.869Z
Updated: 2025-06-11T17:11:59.017Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.