WooCommerce
WordPress plugin ·
woocommerce
· WordPress.org ↗
Latest v11.1.1 Last release Sep 18, 2026 Tested up to WP 7.1.1 7,000,000+ active installs
1
Critical
7
High
100
Known total
1
Unfixed
Running WooCommerce on your site?
WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.
| Severity | Vulnerability | Affected | Fixed in | CVE | Published |
|---|---|---|---|---|---|
| CRITICAL CVSS 9.8 |
WooCommerce [woocommerce] == 7.1.0 (unfixed)
WPVulnerability
|
= 7.1.0 | unfixed | CVE-2022-50972 | Jun 20, 2026 |
| HIGH CVSS 7.5 |
WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability
CVE.org
|
>=n/a, <11.1.0 | v11.1.0 | CVE-2026-48888 | Sep 8, 2026 |
| HIGH CVSS 7.6 |
WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability
CVE.org
|
>=n/a, <11.0 | v11.0 | CVE-2026-57777 | Sep 4, 2026 |
| HIGH CVSS 7.5 |
WooCommerce [woocommerce] < 11.1.0
WPVulnerability
|
< 11.1.0 | v11.1.0 | CVE-2026-48888 | Sep 4, 2026 |
| HIGH CVSS 7.6 |
WooCommerce [woocommerce] < 11.0
WPVulnerability
|
< 11.0 | v11.0 | CVE-2026-57777 | Sep 4, 2026 |
| HIGH CVSS 8.1 |
WooCommerce [woocommerce] < 3.4.6
WPVulnerability
|
< 3.4.6 | v3.4.6 | CVE-2018-20714 | Nov 6, 2018 |
| HIGH CVSS 7.5 |
WooCommerce [woocommerce] < 4.0
WPVulnerability · PoC available
|
< 4.0 | v4.0 | CVE-2017-17058 | Nov 29, 2017 |
| HIGH CVSS 8.8 |
WooCommerce [woocommerce] < 3.2.4
WPVulnerability
|
< 3.2.4 | v3.2.4 | CVE-2017-18356 | Nov 16, 2017 |
| MEDIUM CVSS 6.5 |
WooCommerce [woocommerce] < 10.4.3
WPVulnerability
|
< 10.4.3 | v10.4.3 | CVE-2025-15033 | Dec 22, 2025 |
| MEDIUM CVSS 6.1 |
WooCommerce [woocommerce] < 9.3.4
WPVulnerability
|
< 9.3.4 | v9.3.4 | CVE-2025-5062 | May 21, 2025 |
| MEDIUM CVSS 5.9 |
WooCommerce [woocommerce] < 9.7.1
WPVulnerability
|
< 9.7.1 | v9.7.1 | CVE-2025-26762 | Mar 12, 2025 |
| MEDIUM CVSS 6.1 |
WooCommerce [woocommerce] < 9.1.0
WPVulnerability
|
< 9.1.0 | v9.1.0 | CVE-2024-9944 | Oct 14, 2024 |
| MEDIUM CVSS 5.9 |
WooCommerce [woocommerce] < 9.1.3
WPVulnerability
|
< 9.1.3 | v9.1.3 | CVE-2024-39666 | Aug 16, 2024 |
| MEDIUM CVSS 5.4 |
WooCommerce [woocommerce] < 8.9.3
WPVulnerability
|
< 8.9.3 | v8.9.3 | CVE-2024-37297 | Jun 10, 2024 |
| MEDIUM CVSS 4.3 |
WooCommerce [woocommerce] < 8.6.0
WPVulnerability
|
< 8.6.0 | v8.6.0 | CVE-2024-22155 | Apr 5, 2024 |
| MEDIUM CVSS 4.9 |
WooCommerce [woocommerce] < 8.6
WPVulnerability
|
< 8.6 | v8.6 | CVE-2024-1310 | Mar 25, 2024 |
| MEDIUM CVSS 4.3 |
WooCommerce [woocommerce] < 8.3.0
WPVulnerability
|
< 8.3.0 | v8.3.0 | CVE-2023-52222 | Jan 5, 2024 |
| MEDIUM CVSS 6.5 |
WooCommerce [woocommerce] < 8.2.0
WPVulnerability
|
< 8.2.0 | v8.2.0 | CVE-2023-47777 | Nov 15, 2023 |
| MEDIUM CVSS 4.8 |
WooCommerce [woocommerce] < 6.6.0
WPVulnerability
|
< 6.6.0 | v6.6.0 | CVE-2022-2099 | Jun 20, 2022 |
| MEDIUM CVSS 4.3 |
WooCommerce [woocommerce] < 6.2.1
WPVulnerability · PoC available
|
< 6.2.1 | v6.2.1 | CVE-2022-0775 | Feb 22, 2022 |
| MEDIUM CVSS 4.9 |
WooCommerce [woocommerce] < 6.6.0
WPVulnerability
|
< 6.6.0 | v6.6.0 | CVE-2021-32790 | Jul 13, 2021 |
| MEDIUM CVSS 4.8 |
WooCommerce [woocommerce] < 5.2.0
WPVulnerability
|
< 5.2.0 | v5.2.0 | CVE-2021-24323 | Apr 21, 2021 |
| MEDIUM CVSS 5.3 |
WooCommerce [woocommerce] < 4.7.0
WPVulnerability
|
< 4.7.0 | v4.7.0 | CVE-2020-29156 | Jan 21, 2020 |
| MEDIUM CVSS 6.1 |
WooCommerce [woocommerce] < 3.5.5
WPVulnerability
|
< 3.5.5 | v3.5.5 | CVE-2019-9168 | Feb 20, 2019 |
| MEDIUM CVSS 4.8 |
WooCommerce [woocommerce] < 2.6.9
WPVulnerability
|
< 2.6.9 | v2.6.9 | CVE-2016-10112 | Dec 7, 2016 |
| MEDIUM CVSS 6.1 |
WooCommerce [woocommerce] >= 2.3 - <= 2.3.5
WPVulnerability
|
>= 2.3, <= 2.3.5 | patched | CVE-2015-2329 | Mar 13, 2015 |
| LOW CVSS 3.5 |
WooCommerce [woocommerce] < 9.0.0
WPVulnerability
|
< 9.0.0 | v9.0.0 | CVE-2024-35777 | Jun 27, 2024 |
| NONE CVSS 0.0 |
WooCommerce [woocommerce] < 10.0.3
WPVulnerability
|
< 10.0.3 | v10.0.3 | CVE-2025-49042 | Oct 29, 2025 |
| NONE CVSS 0.0 |
WooCommerce [woocommerce] < 2.2.11
WPVulnerability
|
< 2.2.11 | v2.2.11 | CVE-2015-2069 | Jan 29, 2015 |
| NONE CVSS 0.0 |
WooCommerce [woocommerce] < 2.2.3
WPVulnerability
|
< 2.2.3 | v2.2.3 | CVE-2014-6313 | Sep 11, 2014 |
| UNKNOWN |
WooCommerce [woocommerce] < 10.5.3
WPVulnerability
|
< 10.5.3 | v10.5.3 | CVE-2026-3589 | Mar 10, 2026 |
| UNKNOWN |
WooCommerce [woocommerce] < 9.4.3
WPVulnerability
|
< 9.4.3 | v9.4.3 | — | Dec 4, 2024 |
| UNKNOWN |
WooCommerce [woocommerce] < 8.9.3
WPVulnerability
|
< 8.9.3 | v8.9.3 | — | Jun 11, 2024 |
| UNKNOWN |
WooCommerce [woocommerce] < 8.4.0
WPVulnerability
|
< 8.4.0 | v8.4.0 | — | Jan 12, 2024 |
| UNKNOWN |
WooCommerce [woocommerce] < 7.0.1
WPVulnerability
|
< 7.0.1 | v7.0.1 | — | Sep 11, 2023 |
| UNKNOWN |
WooCommerce [woocommerce] < 7.9.0
WPVulnerability
|
< 7.9.0 | v7.9.0 | — | Sep 11, 2023 |
| UNKNOWN |
WooCommerce [woocommerce] < 5.7.0
WPVulnerability
|
< 5.7.0 | v5.7.0 | — | Apr 10, 2022 |
| UNKNOWN |
WooCommerce [woocommerce] < 6.3.1
WPVulnerability
|
< 6.3.1 | v6.3.1 | — | Mar 10, 2022 |
| UNKNOWN |
WooCommerce [woocommerce] < 6.3.1
WPVulnerability
|
< 6.3.1 | v6.3.1 | — | Mar 10, 2022 |
| UNKNOWN |
WooCommerce [woocommerce] < 6.2.1
WPVulnerability
|
< 6.2.1 | v6.2.1 | — | Feb 23, 2022 |
| UNKNOWN |
WooCommerce [woocommerce] < 6.2.1
WPVulnerability
|
< 6.2.1 | v6.2.1 | — | Feb 23, 2022 |
| UNKNOWN |
WooCommerce [woocommerce] < 6.2.1
WPVulnerability
|
< 6.2.1 | v6.2.1 | — | Feb 22, 2022 |
| UNKNOWN |
WooCommerce [woocommerce] < 5.7.0
WPVulnerability
|
< 5.7.0 | v5.7.0 | — | Sep 22, 2021 |
| UNKNOWN |
WooCommerce [woocommerce] < 5.5.1
WPVulnerability
|
< 5.5.1 | v5.5.1 | — | Jul 15, 2021 |
| UNKNOWN |
WooCommerce [woocommerce] < 5.2.0
WPVulnerability
|
< 5.2.0 | v5.2.0 | — | Apr 29, 2021 |
| UNKNOWN |
WooCommerce [woocommerce] < 4.6.2
WPVulnerability
|
< 4.6.2 | v4.6.2 | — | Nov 6, 2020 |
| UNKNOWN |
WooCommerce [woocommerce] < 4.6.2
WPVulnerability
|
< 4.6.2 | v4.6.2 | — | Nov 5, 2020 |
| UNKNOWN |
WooCommerce [woocommerce] < 4.2.1
WPVulnerability
|
< 4.2.1 | v4.2.1 | — | Jun 22, 2020 |
| UNKNOWN |
WooCommerce [woocommerce] < 4.1.0
WPVulnerability
|
< 4.1.0 | v4.1.0 | — | May 5, 2020 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.6.5
WPVulnerability
|
< 3.6.5 | v3.6.5 | — | Jul 7, 2019 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.6.5
WPVulnerability
|
< 3.6.5 | v3.6.5 | — | Jul 2, 2019 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.6.5
WPVulnerability
|
< 3.6.5 | v3.6.5 | — | Jul 2, 2019 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.5.1
WPVulnerability
|
< 3.5.1 | v3.5.1 | — | Jan 7, 2019 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.4.6
WPVulnerability
|
< 3.4.6 | v3.4.6 | — | Dec 11, 2018 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.5.2
WPVulnerability
|
< 3.5.2 | v3.5.2 | — | Nov 29, 2018 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.4.6
WPVulnerability
|
< 3.4.6 | v3.4.6 | — | Nov 7, 2018 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.4.6
WPVulnerability
|
< 3.4.6 | v3.4.6 | — | Oct 29, 2018 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.4.5
WPVulnerability
|
< 3.4.5 | v3.4.5 | — | Sep 1, 2018 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.4.5
WPVulnerability
|
< 3.4.5 | v3.4.5 | — | Aug 29, 2018 |
| UNKNOWN |
WooCommerce [woocommerce] < 3.2.4
WPVulnerability
|
< 3.2.4 | v3.2.4 | — | Feb 23, 2018 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.6.4
WPVulnerability
|
< 2.6.4 | v2.6.4 | — | Sep 9, 2016 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.6.4
WPVulnerability
|
< 2.6.4 | v2.6.4 | — | Jul 26, 2016 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.6.3
WPVulnerability
|
< 2.6.3 | v2.6.3 | — | Jul 20, 2016 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.6.3
WPVulnerability
|
< 2.6.3 | v2.6.3 | — | Jul 19, 2016 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.4.9
WPVulnerability
|
< 2.4.9 | v2.4.9 | — | Nov 17, 2015 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.4.9
WPVulnerability
|
< 2.4.9 | v2.4.9 | — | Nov 17, 2015 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.3.11
WPVulnerability
|
< 2.3.11 | v2.3.11 | — | Jun 17, 2015 |
| UNKNOWN |
WooCommerce [woocommerce] >= 2.0.20 - <= 2.3.10
WPVulnerability
|
>= 2.0.20, <= 2.3.10 | patched | — | Jun 10, 2015 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.2.3
WPVulnerability
|
< 2.2.3 | v2.2.3 | — | Jun 10, 2015 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.0.13
WPVulnerability
|
< 2.0.13 | v2.0.13 | — | May 15, 2015 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.3.6
WPVulnerability
|
< 2.3.6 | v2.3.6 | — | May 15, 2015 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.0.18
WPVulnerability
|
< 2.0.18 | v2.0.18 | — | May 15, 2015 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.2.3
WPVulnerability
|
< 2.2.3 | v2.2.3 | — | Sep 17, 2014 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.0.18
WPVulnerability
|
< 2.0.18 | v2.0.18 | — | Oct 17, 2013 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.0.13
WPVulnerability
|
< 2.0.13 | v2.0.13 | — | Jul 18, 2013 |
| UNKNOWN |
WooCommerce [woocommerce] < 2.2.3
WPVulnerability
|
< 2.2.3 | v2.2.3 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 4.2.1
WPVulnerability
|
< 4.2.1 | v4.2.1 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 2.0.13
WPVulnerability
|
< 2.0.13 | v2.0.13 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 2.0.17
WPVulnerability
|
< 2.0.17 | v2.0.17 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 6.2.1
WPVulnerability
|
< 6.2.1 | v6.2.1 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 8.4.0
WPVulnerability
|
< 8.4.0 | v8.4.0 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 5.7.0
WPVulnerability
|
< 5.7.0 | v5.7.0 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 5.7.0
WPVulnerability
|
< 5.7.0 | v5.7.0 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 4.6.2
WPVulnerability
|
< 4.6.2 | v4.6.2 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 3.4.5
WPVulnerability
|
< 3.4.5 | v3.4.5 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 8.4.0
WPVulnerability
|
< 8.4.0 | v8.4.0 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 4.1.0
WPVulnerability
|
< 4.1.0 | v4.1.0 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 3.6.5
WPVulnerability
|
< 3.6.5 | v3.6.5 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 3.5.1
WPVulnerability
|
< 3.5.1 | v3.5.1 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 7.9.0
WPVulnerability
|
< 7.9.0 | v7.9.0 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 7.0.1
WPVulnerability
|
< 7.0.1 | v7.0.1 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 3.4.6
WPVulnerability
|
< 3.4.6 | v3.4.6 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 7.9
WPVulnerability
|
< 7.9 | v7.9 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 7.0.1
WPVulnerability
|
< 7.0.1 | v7.0.1 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 3.4.6
WPVulnerability
|
< 3.4.6 | v3.4.6 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 3.4.6
WPVulnerability
|
< 3.4.6 | v3.4.6 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 2.6.3
WPVulnerability
|
< 2.6.3 | v2.6.3 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 2.3.11
WPVulnerability
|
< 2.3.11 | v2.3.11 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 2.4.9
WPVulnerability
|
< 2.4.9 | v2.4.9 | — | — |
| UNKNOWN |
WooCommerce [woocommerce] < 2.6.4
WPVulnerability
|
< 2.6.4 | v2.6.4 | — | — |
Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.