6.5
Moyenne
CVE-2023-47777 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooCommerce, Automattic WooCommerce Blocks allows Stored XSS.This issue affects WooCommerce: from n/a through 8.1.1; WooCommerce Blocks: from n/a through 11.1.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WooCommerce 8.1 | premières → 8.1.1 | Pas de correctif indiqué |
| WooCommerce Blocks 11.1 | premières → 11.1.1 | Pas de correctif indiqué |
Autres CVE de WooCommerce
Les 18 CVE de WooCommerce →
CVE-2026-106608
Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This…
7.2
Élevée
CVE-2026-48888
Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS
7.5
Élevée
CVE-2026-57777
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic…
7.6
Élevée
CVE-2026-3589
The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could…
7.5
Élevée