WooMS

WooMS has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; none of them are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Missing Authorization, Server-Side Request Forgery (SSRF).

None of the 4 issues recorded for WooMS have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, most of them (2) reported by Nabil Irawan.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all WooMS vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-13700

WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery

Read the full analysis

Vulnerability Records

4 records


2026-08-14 00:00	WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery WooMS <= 9.14	`CVE-2026-13700`	7.2 High	dangnosuy	No
2025-09-22 00:00	WooMS <= 9.12 - Authenticated (Administrator+) Stored Cross-Site Scripting WooMS <= 9.12	`CVE-2025-57956`	4.4 Medium	Nabil Irawan	No
2025-09-22 00:00	WooMS <= 9.12 - Missing Authorization WooMS <= 9.12	`CVE-2025-57957`	6.5 Medium	Nabil Irawan	No
2025-04-15 00:00	WooMS <= 9.12 - Reflected Cross-Site Scripting WooMS <= 9.12	`CVE-2025-32602`	6.1 Medium	0xd4rk5id3	No

Showing 1–4 of 4 reports