automattic

woocommerce

2 known vulnerabilities · sorted by CVSS score

CVE-2023-47777

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooCommerce, Automattic WooCommerce Blocks allows Stored XSS.This issue affects WooCommerce: from n/a through 8.1.1; WooCommerce Blocks: from n/a through 11.1.1.

automattic / woocommerce+1

Network

Published Nov 30, 2023

CVE-2024-1310

MEDIUM4.9

The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)

automattic / woocommerce

Network

Published Apr 15, 2024