WooCommerce

9.4.2 PostMessageBased CrossSite Scripting <= 9.3.2

7.1

22 May, 2025

Cross Site Scripting (XSS) vulnerability <= 9.7.0

5.9

12 March, 2025

Unauthenticated Order Creation vulnerability < 9.4.3

5.3

4 December, 2024

Unauthenticated HTML Injection vulnerability <= 9.0.2

5.3

15 October, 2024

Cross Site Scripting (XSS) vulnerability <= 9.1.2

5.9

16 August, 2024