MakeCommerce for WooCommerce
by WordPress
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-96817 | Hig | 0.53 | 8.2 | 0.00 | Sep 30, 2026 | Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions. | ||
| CVE-2024-37509 | Hig | 0.46 | 7.1 | 0.00 | Jul 21, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Maksekeskus AS MakeCommerce for WooCommerce allows Reflected XSS.This issue affects MakeCommerce for WooCommerce: from n/a through 3.5.1. |
- risk 0.53cvss 8.2epss 0.00
Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.
- risk 0.46cvss 7.1epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Maksekeskus AS MakeCommerce for WooCommerce allows Reflected XSS.This issue affects MakeCommerce for WooCommerce: from n/a through 3.5.1.