Doofinder vulnerabilities
We track 2 vulnerabilities in Doofinder products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Doofinder vulnerabilities
- 7.5 High severity
Doofinder for WooCommerce: Insertion of Sensitive Information into Externally-Accessible File or Directory
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from n/a throug
- 7.1 High severity
Doofinder: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinder doofinder allows Reflected XSS.This issue affects Doofinder: from n/a through <= 0.5.4.