CVE-2024-39666

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 9.1.2...

EUVD-2025-36601

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Automattic WooCommerce woocommerce allows Stored XSS.This issue affects WooCommerce: from n/a through 10.0.2...

EUVD-2018-13260

Malware in sbrugna...

EUVD-2023-51875

Malicious code in bioql PyPI...

EUVD-2024-35535

Malicious code in bioql PyPI...

EUVD-2024-19751

Malicious code in bioql PyPI...

EUVD-2024-38171

Malicious code in bioql PyPI...

CVE-2024-22155

Cross-Site Request Forgery CSRF vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.5.2...

CVE-2023-47777

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Automattic WooCommerce, Automattic WooCommerce Blocks allows Stored XSS.This issue affects WooCommerce: from n/a through 8.1.1; WooCommerce Blocks: from n/a through 11.1.1...

CVE-2025-26762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Automattic WooCommerce woocommerce allows Stored XSS.This issue affects WooCommerce: from n/a through = 9.7.0...

CVE-2024-39666

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 9.1.2...

CVE-2024-35777

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Automattic WooCommerce allows Content Spoofing.This issue affects WooCommerce: from n/a through 8.9.2...

CVE-2024-35777

CVE-2024-35777 is an Injection vulnerability in WooCommerce (WordPress plugin) that allows content spoofing via improper neutralization in output used by a downstream component. Affected versions are WooCommerce up to 8.9.2; exploitation was not indicated as in-the-wild within the provided disclo...

CVE-2024-22155

Cross-Site Request Forgery CSRF vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.5.2...

CVE-2024-22155

CVE-2024-22155 is a documented CSRF vulnerability in Automattic WooCommerce affecting versions up to 8.5.2, as reflected by the connected Red Hat advisory. The available sources do not provide concrete exploit details, affected subcomponents, or a confirmed patch/version to mitigate this specific...

CVE-2024-22155 WordPress WooCommerce plugin <= 8.5.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.5.2...

CVE-2023-52222

Cross-Site Request Forgery CSRF vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.2.2...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.2.2...

CVE-2023-52222 WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.2.2...

CVE-2023-47777

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Automattic WooCommerce, Automattic WooCommerce Blocks allows Stored XSS.This issue affects WooCommerce: from n/a through 8.1.1; WooCommerce Blocks: from n/a through 11.1.1...