WooCommerce

Güvenlik açıkları

• CVE-2022-50972

  WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php

  Kritik 9.3

• CVE-2023-52222

  WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2026-57777→ 11.0

  WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2026-48888→ 11.1.0

  WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability

  Yüksek 7.5

• CVE-2024-9944

  WooCommerce <= 9.0.2 - Unauthenticated HTML Injection

  Orta 6.1

• CVE-2025-49042

  WordPress WooCommerce plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability

  Orta 5.9

• CVE-2025-26762

  WordPress WooCommerce plugin <= 9.7.0 - Cross Site Scripting (XSS) vulnerability

  Orta 5.9

• CVE-2024-39666

  WordPress WooCommerce plugin <= 9.1.2 - Cross Site Scripting (XSS) vulnerability

  Orta 5.9

• CVE-2023-47777

  WordPress WooCommerce and WooCommerce Blocks plugins - Auth. Cross-Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2023-7320

  WooCommerce <= 7.8.2 - Sensitive Information Exposure

  Orta 5.3

• CVE-2016-10112

  Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.6.9 for WordPress allows remote authenticated administrators to

  Orta 4.8

• CVE-2024-22155

  WordPress WooCommerce plugin <= 8.5.2 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 4.3

• CVE-2015-2069

  Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.11 for WordPress allows remote attackers to inject arbitrary w

  Orta 4.3

• CVE-2014-6313

  Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for WordPress allows remote attackers to inject arbitrary we

  Orta 4.3

• CVE-2024-35777

  WordPress WooCommerce plugin <= 8.9.2 - Content Injection vulnerability

  Düşük 3.5