GCVE - cpe:2.3:a:woocommerce:automatewoo:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:woocommerce:automatewoo:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Woocommerce (`c7b0e075-8e70-51f0-86a8-e45639512f20`)
Product	Automatewoo (`d62ee4d0-d0bf-535b-9159-0bd4ae38825a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-36513`	vulnerable	2026-06-03 14:52:26.518402	WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF) MEDIUM (5.4) Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions. Published: 2023-07-17T14:26:47.999Z Updated: 2026-04-28T16:08:31.621Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/automatewoo/wordpress-automatewoo-plugin-5-7-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33330`	vulnerable	2026-06-03 14:52:13.500091	WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection HIGH (8.5) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.50. Published: 2023-12-20T15:44:44.694Z Updated: 2026-04-28T16:08:26.268Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/woocommerce-follow-up-emails/wordpress-woocommerce-follow-up-emails-plugin-4-9-50-follow-up-emails-manager-sql-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33318`	vulnerable	2026-06-03 14:52:13.470718	WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload CRITICAL (9.9) Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40. Published: 2023-12-20T18:53:33.231Z Updated: 2026-04-28T16:08:25.203Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/woocommerce-follow-up-emails/wordpress-woocommerce-follow-up-emails-plugin-4-9-40-arbitrary-file-upload-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32745`	vulnerable	2026-06-03 14:51:59.925915	WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to Cross Site Request Forgery (CSRF) MEDIUM (5.4) Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions. Published: 2023-11-09T20:38:31.093Z Updated: 2026-04-28T16:08:24.091Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/automatewoo/wordpress-automatewoo-plugin-5-7-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32743`	vulnerable	2026-06-03 14:51:59.920281	WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to SQL Injection HIGH (7.6) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.1. Published: 2023-12-20T15:55:22.844Z Updated: 2026-04-28T16:08:24.117Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/automatewoo/wordpress-automatewoo-plugin-5-7-1-shop-manager-sql-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.