Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
WooCommerce

WooCommerce Shipping Multiple Addresses vulnerabilities

3 published CVEs name WooCommerce Shipping Multiple Addresses among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 1Medium 2Low 0Not scored 0

Newest CVEs

  • CVE-2023-32799

    WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.3 is vulnerable to Insecure Direct Object References (IDOR)

    WooCommerce · Shipping Multiple Addresses

    Medium6.5
  • CVE-2023-37873

    WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.5 is vulnerable to Cross Site Scripting (XSS)

    WooCommerce · Shipping Multiple Addresses

    High7.1
  • CVE-2023-36514

    WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.5 is vulnerable to Cross Site Request Forgery (CSRF)

    WooCommerce · Shipping Multiple Addresses

    Medium6.5

Most common weaknesses

  1. CWE-352 Cross-site request forgery (CSRF)1
  2. CWE-639 Authorization bypass through a user-controlled key (IDOR)1
  3. CWE-79 Cross-site scripting (XSS)1