VendorsWooCommerceautomatewooall versions
Vulnerabilities

WooCommerce Automatewoo 4.9.50 for Wordpress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2023-33318
WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload
Published 2023-12-20 · Modified
9.9EPSS 0.008
CVE-2023-32745
WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-11-09 · Modified
8.8EPSS 0.003
CVE-2023-33316
WordPress WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-05-28 · Modified
8.8EPSS 0.002
CVE-2023-36513
WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-07-17 · Modified
8.8EPSS 0.002
CVE-2023-33330
WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection
Published 2023-12-20 · Modified
8.5EPSS 0.006
CVE-2023-32743
WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to SQL Injection
Published 2023-12-20 · Modified
7.6EPSS 0.006
CVE-2023-33319
WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Cross Site Scripting (XSS)
Published 2023-05-28 · Modified
7.1EPSS 0.004