CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor/product archive
3 CVEs tagged to automattic / woocommerce — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.
The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and…
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooCommerce, Automattic WooCommerce Blocks allows Stored XSS.This…
The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which accesses a parent…