WordPress WooCommerce Vulnerabilities
13 vulnerabilities related to WordPress WooCommerce
- 2026-05-22WordPress WooCommerce OrderConvo 插件 /wp-json/wooconvo/v1/download-file 文件读取漏洞（CVE-2025-10162）
- 2026-04-24WordPress WooCommerce Designer Pro存在任意文件读取(CVE-2025-10897)
- 2026-01-23WordPress Drag and Drop Multiple File Upload for WooCommerce dnd_codedropz_upload_wc 文件上传漏洞（CVE-2025-4403）
- 2026-01-23WordPress Drag and Drop Multiple File Upload for WooCommerce dnd_codedropz_upload_wc 文件上传漏洞（CVE-2025-4403）
- 2025-11-14WordPress WooCommerce Designer Pro 插件 /wp-admin/admin-ajax.php wcdp_save_canvas_design_ajax 文件上传漏洞（CVE-2025-6440）
- 2025-11-14WordPress WooCommerce Designer Pro 插件 /wp-admin/admin-ajax.php wcdp_save_canvas_design_ajax 文件上传漏洞（CVE-2025-6440）
- 2025-09-19Wordpress WooCommerce Ultimate Gift Card /wp-admin/admin-ajax.php mwb_wgm_preview_mail 文件上传漏洞（CVE-2024-8425）
- 2025-09-19Wordpress WooCommerce Ultimate Gift Card /wp-admin/admin-ajax.php mwb_wgm_preview_mail 文件上传漏洞（CVE-2024-8425）
- PoC2025-08-01CVE-2021-24300: WordPress WooCommerce <1.13.22 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-1020: WordPress WooCommerce <3.1.2 - Arbitrary Function Call
- PoC2025-08-01CVE-2023-2256: WordPress Product Addons & Fields for WooCommerce < 32.0.7 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-1020: WordPress WooCommerce <3.1.2 - Arbitrary Function Call
- PoC2025-08-01woocommerce-pdf-invoices-xss: WordPress WooCommerce PDF Invoices & Packing Slips <2.15.0 - Cross-Site Scripting