| CVE-2025-47649 | WordPress Open Close WooCommerce Store plugin <= 5.0.0 - Local File Inclusion vulnerability | StackWC | Open Close WooCommerce Store | High | 8.8 | 2025-05-07 14:20:44 | Deep Dive |
| CVE-2025-47648 | WordPress Pays – WooCommerce Payment Gateway plugin <= 2.6 - Cross Site Request Forgery (CSRF) Vulnerability | axima | Pays – WooCommerce Payment Gateway | High | 7.1 | 2025-05-07 14:20:44 | Deep Dive |
| CVE-2025-47643 | WordPress ELEX Product Feed for WooCommerce plugin <= 3.1.2 - SQL Injection Vulnerability | ELEXtensions | ELEX Product Feed for WooCommerce | High | 7.6 | 2025-05-07 14:20:42 | Deep Dive |
| CVE-2025-47633 | WordPress Awin – Advertiser Tracking for WooCommerce plugin <= 2.0.0 - CSRF to Product Feed Regeneration vulnerability | Awin | Awin – Advertiser Tracking for WooCommerce | Medium | 4.3 | 2025-05-07 14:20:39 | Deep Dive |
| CVE-2025-47602 | WordPress Calculate Prices based on Distance For WooCommerce plugin <= 1.3.5 - Broken Access Control vulnerability | ammarahmad786 | Calculate Prices based on Distance For WooCommerce | Medium | 5.4 | 2025-05-07 14:20:27 | Deep Dive |
| CVE-2025-47544 | WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability | acowebs | Dynamic Pricing With Discount Rules for WooCommerce | High | 7.6 | 2025-05-07 14:20:17 | Deep Dive |
| CVE-2025-47538 | WordPress Cart tracking for WooCommerce plugin <= 1.0.17 - SQL Injection Vulnerability | wpdever | Cart tracking for WooCommerce | High | 7.6 | 2025-05-07 14:20:14 | Deep Dive |
| CVE-2025-47537 | WordPress PDF Invoice Builder for WooCommerce plugin <= 5.3.8 - SQL Injection Vulnerability | add-ons.org | PDF Invoice Builder for WooCommerce | High | 7.6 | 2025-05-07 14:20:13 | Deep Dive |
| CVE-2025-47526 | WordPress GS Variation Swatches for WooCommerce plugin <= 3.0.4 - Broken Access Control Vulnerability | GS Plugins | GS Variation Swatches for WooCommerce | Medium | 5.4 | 2025-05-07 14:20:10 | Deep Dive |
| CVE-2025-47505 | WordPress Product Time Countdown for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability | ProWCPlugins | Product Time Countdown for WooCommerce | Medium | 6.5 | 2025-05-07 14:19:59 | Deep Dive |
| CVE-2025-47504 | WordPress Custom Checkout Fields for WooCommerce plugin <= 1.8.3 - Cross Site Scripting (XSS) Vulnerability | WPFactory | Custom Checkout Fields for WooCommerce | Medium | 6.5 | 2025-05-07 14:19:58 | Deep Dive |
| CVE-2025-47472 | WordPress Music Player for WooCommerce plugin <= 1.5.1 - Broken Access Control Vulnerability | codepeople | Music Player for WooCommerce | Medium | 5.4 | 2025-05-07 14:19:45 | Deep Dive |
| CVE-2025-47473 | WordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability | pimwick | PW WooCommerce Bulk Edit | Medium | 5.4 | 2025-05-07 14:19:45 | Deep Dive |
| CVE-2025-47460 | WordPress TrackShip for WooCommerce plugin <= 1.9.1 - SQL Injection Vulnerability | TrackShip | TrackShip for WooCommerce | High | 7.6 | 2025-05-07 14:19:39 | Deep Dive |
| CVE-2025-47455 | WordPress Integration for WooCommerce and Salesforce plugin <= 1.7.5 - Open Redirection Vulnerability | CRM Perks | Integration for WooCommerce and Salesforce | Medium | 4.7 | 2025-05-07 14:19:37 | Deep Dive |
| CVE-2025-47451 | WordPress Product Quantity Dropdown For Woocommerce plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability | silverplugins217 | Product Quantity Dropdown For Woocommerce | Medium | 4.3 | 2025-05-07 14:19:36 | Deep Dive |
| CVE-2025-4335 | Woocommerce Multiple Addresses <= 1.0.7.1 - Authenticated (Subscriber+) Privilege Escalation | n3wnormal | Woocommerce Multiple Addresses | High | 8.8 | 2025-05-07 01:43:08 | Deep Dive |
| CVE-2024-13344 | Advance Seat Reservation Management for WooCommerce <= 3.3 - Unauthenticated SQL Injection | smartcms | Advance Seat Reservation Management for WooCommerce | High | 7.5 | 2025-05-02 03:21:18 | Deep Dive |
| CVE-2025-2168 | Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Update | bdthemes | Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor | Medium | 4.3 | 2025-05-01 03:23:40 | Deep Dive |
| CVE-2025-3906 | Integração entre Eduzz e Woocommerce 1.5.0 - 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation | felipe152 | Integração entre Eduzz e Woocommerce | High | 8.8 | 2025-04-26 05:34:25 | Deep Dive |