woocommerce/woocommerce
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| WooCommerce has a Cross-Site Scripting (XSS) Vulnerability in checkout & registration forms | woocommerce/woocommercewoocommerce | ComposerWordPress | Medium | Fix reported | |
| WooCommerce WordPress plugin before 6.6.0 vulnerable to stored HTML injection | woocommerce/woocommercewoocommerce | ComposerWordPress | Medium | Fix reported | |
| WooCommerce Cross-Site Request Forgery (CSRF) | woocommerce/woocommerce | Composer | High | Fix reported | |
| Woocommerce Cross-site Scripting via Additional tax classes field when taxes are enabled | woocommerce/woocommercewoocommerce | ComposerWordPress | Medium | Fix reported | |
| WooCommerce Incorrect Authorization | woocommerce/woocommercewoocommerce | ComposerWordPress | Medium | Fix reported |