Known Vulnerabilities for Woocommerce Plugin by Woothemes
Listed below are 1 of the newest known vulnerabilities associated with "Woocommerce Plugin" by "Woothemes".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57857 json | The Flow Payment plugin for WordPress (flow.cl) version 3.0.8 is vulnerable to reflected cross-site scripting on the WooComme... | Not Provided | 2026-07-18 | 2026-07-20 |
| CVE-2026-47100 json | Funnel Builder for WooCommerce Checkout prior to 3.15.0.3 contains a missing authorization vulnerability in the public checko... | Not Provided | 2026-05-19 | 2026-05-19 |
| CVE-2026-39671 json | Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-fo... | Not Provided | 2026-04-08 | 2026-04-29 |
| CVE-2026-16078 json | The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all ver... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-15794 json | The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'position' Shortcode... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-15759 json | The ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form plugin for WordPress is vulnerable to S... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-15648 json | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'width' Shortcode Attribute ... | Not Provided | 2026-07-24 | 2026-07-24 |
| CVE-2026-15647 json | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-15646 json | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute ... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-15349 json | The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to authorization bypass... | Not Provided | 2026-07-17 | 2026-07-17 |