CVE-2023-33316: Woocommerce Automatewoo

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.

Affected products

• Woocommerce Automatewoo: before 4.9.50 (fixed in 4.9.50)

Published 2023-05-28. Last modified 2026-06-17.