Medium severity6.1NVD Advisory· Published Feb 8, 2018· Updated Jun 17, 2026

CVE-2015-2329

Description

Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted order.

Affected products

WordPress/WooCommerceinferred2 versions
<2.3.6+ 1 more
- (no CPE)range: <2.3.6
- (no CPE)range: <2.3.6
Package: https://wordpress.org/plugins/woocommerce

Patches

Vulnerability mechanics

References

raw.githubusercontent.com/woocommerce/woocommerce/master/CHANGELOG.txtnvdRelease NotesVendor Advisory
fortiguard.com/zeroday/FG-VD-15-020nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000