PatchTheCVE: doofinderhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-25596: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofindehttps://patchthecve.com/cve/CVE-2024-25596.htmlhttps://patchthecve.com/cve/CVE-2024-25596.htmlWed, 17 Jun 2026 07:16:14 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2.1.8.CVE-2023-51678: Cross-Site Request Forgery (CSRF) vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affehttps://patchthecve.com/cve/CVE-2023-51678.htmlhttps://patchthecve.com/cve/CVE-2023-51678.htmlWed, 17 Jun 2026 06:41:27 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33.CVE-2023-40602: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Doofinder Doofinder WP & WooCommerce Searhttps://patchthecve.com/cve/CVE-2023-40602.htmlhttps://patchthecve.com/cve/CVE-2023-40602.htmlWed, 17 Jun 2026 06:18:40 +0000MEDIUM 4.7: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49.CVE-2023-49185: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofindehttps://patchthecve.com/cve/CVE-2023-49185.htmlhttps://patchthecve.com/cve/CVE-2023-49185.htmlWed, 17 Jun 2026 06:35:33 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinder WP & WooCommerce Search allows Reflected XSS.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.1.7.