Packagist/woocommerce/woocommerce — 5 CVEs

HIGH8.8CVE-2019-20891WooCommerce Cross-Site Request Forgery (CSRF)

from 0, < 3.6.5

MEDIUM5.4CVE-2024-37297WooCommerce has a Cross-Site Scripting (XSS) Vulnerability in checkout & registration forms

>= 8.8.0, < 8.8.5

MEDIUM5.3CVE-2020-29156WooCommerce Incorrect Authorization

from 0, < 4.7.0

MEDIUM4.8WooCommerce WordPress plugin before 6.6.0 vulnerable to stored HTML injection

from 0, < 6.6.0

MEDIUM4.8Woocommerce Cross-site Scripting via Additional tax classes field when taxes are enabled

from 0, < 5.2.0

pkg:Packagist/woocommerce/woocommerce