Approved changes feed: RSS · Atom

cpe:2.3:a:woocommerce:automatewoo:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWoocommerce (c7b0e075-8e70-51f0-86a8-e45639512f20)
ProductAutomatewoo (d62ee4d0-d0bf-535b-9159-0bd4ae38825a)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36513 vulnerable 2026-06-03 14:52:26.518935 WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions.
Published: 2023-07-17T14:26:47.999Z
Updated: 2026-04-28T16:08:31.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33330 vulnerable 2026-06-03 14:52:13.500133 WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.50.
Published: 2023-12-20T15:44:44.694Z
Updated: 2026-04-28T16:08:26.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33319 vulnerable 2026-06-03 14:52:13.471228 WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.
Published: 2023-05-28T18:07:44.619Z
Updated: 2026-04-28T16:08:25.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33318 vulnerable 2026-06-03 14:52:13.470767 WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload
CRITICAL (9.9)
Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40.
Published: 2023-12-20T18:53:33.231Z
Updated: 2026-04-28T16:08:25.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33316 vulnerable 2026-06-03 14:52:13.465272 WordPress WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.
Published: 2023-05-28T18:01:01.356Z
Updated: 2026-04-28T16:08:25.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32745 vulnerable 2026-06-03 14:51:59.925957 WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions.
Published: 2023-11-09T20:38:31.093Z
Updated: 2026-04-28T16:08:24.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32743 vulnerable 2026-06-03 14:51:59.921098 WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to SQL Injection
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.1.
Published: 2023-12-20T15:55:22.844Z
Updated: 2026-04-28T16:08:24.117Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.