目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

woocommerce 厂商漏洞列表 / CVE 中文分析 51

woocommerce 厂商相关 51 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

WooCommerce 是 WordPress 生态中广泛使用的开源电商插件，核心用途为构建在线商店。其历史漏洞多集中于未授权访问、跨站脚本（XSS）及远程代码执行（RCE），常因输入验证不足或权限控制缺陷引发。截至最新统计，已收录 47 条 CVE，涉及敏感信息泄露与文件包含风险。开发者持续通过安全更新修复缺陷，建议用户保持版本最新并遵循最小权限原则以保障交易数据安全。

Top products by woocommerce: WooCommerce Stripe Payment Gateway AutomateWoo woocommerce WooCommerce PayPal Payments Shipping Multiple Addresses Product Vendors WooCommerce Box Office WooCommerce Square WooCommerce Bookings Product Add-Ons WooCommerce Pre-Orders WooCommerce Brands WooCommerce Follow-Up Emails (AutomateWoo) WooPayments: Integrated WooCommerce Payments Returns and Warranty Requests Google for WooCommerce WooCommerce Smart Coupons WooCommerce One Page Checkout WooCommerce Shipping Per Product Canada Post Shipping Method GoCardless Woo Subscriptions WooCommerce Product Vendors Bulk Stock Management Product Recommendations WooCommerce Order Barcodes woocommerce-gutenberg-products-block Composite Products
CVE ID 标题 CVSS 风险等级 Published
CVE-2023-32794 WordPress Plugin Product Add-Ons 安全漏洞 — Product Add-Ons CWE-352 5.4 Medium 2023-11-09
CVE-2023-35879 WordPress Plugin WooCommerce Product Vendors SQL注入漏洞 — Product Vendors CWE-89 7.6 High 2023-10-31
CVE-2023-34004 WordPress plugin WooCommerce Box Office 跨站脚本漏洞 — WooCommerce Box Office CWE-79 6.5 Medium 2023-08-30
CVE-2023-33317 WordPress plugin Returns and Warranty Requests 跨站脚本漏洞 — Returns and Warranty Requests CWE-79 7.1 High 2023-08-30
CVE-2023-32746 WordPress plugin WooCommerce Brands 跨站脚本漏洞 — WooCommerce Brands CWE-79 6.5 Medium 2023-08-30
CVE-2023-32793 WordPress plugin WooCommerce Pre-Orders 跨站脚本漏洞 — WooCommerce Pre-Orders CWE-79 6.5 Medium 2023-08-30
CVE-2023-32802 WordPress plugin WooCommerce Pre-Orders 跨站脚本漏洞 — WooCommerce Pre-Orders CWE-79 7.1 High 2023-08-30
CVE-2023-32801 WordPress plugin Composite Products 跨站脚本漏洞 — Composite Products CWE-79 7.1 High 2023-08-30
CVE-2023-37873 WordPress plugin WooCommerce Shipping Multiple Addresses 跨站脚本漏洞 — Shipping Multiple Addresses CWE-79 7.1 High 2023-08-05
CVE-2023-36514 WordPress Plugin WooCommerce Ship to Multiple Addresses 跨站请求伪造漏洞 — Shipping Multiple Addresses CWE-352 6.5 Medium 2023-07-17
CVE-2023-36513 WordPress Plugin AutomateWoo 跨站请求伪造漏洞 — AutomateWoo CWE-352 5.4 Medium 2023-07-17
CVE-2023-36511 WordPress Plugin WooCommerce Order Barcodes 跨站请求伪造漏洞 — WooCommerce Order Barcodes CWE-352 4.3 Medium 2023-07-17
CVE-2023-35880 WordPress Plugin WooCommerce Brands 跨站请求伪造漏洞 — WooCommerce Brands CWE-352 5.4 Medium 2023-07-17
CVE-2023-35917 WordPress Plugin WooCommerce PayPal Payments 跨站请求伪造漏洞 — WooCommerce PayPal Payments CWE-352 4.3 Medium 2023-06-22
CVE-2023-35918 WordPress Plugin WooCommerce Bulk Stock Management 跨站脚本漏洞 — Bulk Stock Management CWE-79 7.1 High 2023-06-22
CVE-2023-34000 WordPress Plugin WooCommerce Stripe Payment Gateway 安全漏洞 — WooCommerce Stripe Payment Gateway CWE-639 7.5 High 2023-06-14
CVE-2023-33332 WordPress plugin WooCommerce Product Vendors 跨站脚本漏洞 — WooCommerce Product Vendors CWE-79 7.1 High 2023-05-28
CVE-2023-33319 WordPress plugin WooCommerce Follow-Up Emails 跨站脚本漏洞 — WooCommerce Follow-Up Emails (AutomateWoo) CWE-79 7.1 High 2023-05-28
CVE-2023-33316 WordPress plugin WooCommerce Follow-Up Emails 跨站请求伪造漏洞 — WooCommerce Follow-Up Emails (AutomateWoo) CWE-352 5.4 Medium 2023-05-28
CVE-2021-32790 WordPress SQL注入漏洞 — woocommerce CWE-89 4.9 Medium 2021-07-26
CVE-2021-32789 WordPress SQL注入漏洞 — woocommerce-gutenberg-products-block CWE-89 7.5 High 2021-07-26

本页汇总了 woocommerce 厂商截至目前公开的全部 51 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。