Plugin icon

Hippoo Mobile App for WooCommerce

hippoo

Vulnerabilities:

4

Last Updated:

August 29, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-06-08
Title
Hippoo Mobile App for WooCommerce < 1.9.6 - Missing Authorization
Fixed in
Fixed in 1.9.6
CVSS
5.3 (medium)
Published
2026-06-05
Title
Hippoo Mobile App for WooCommerce < 1.9.5 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API
Fixed in
Fixed in 1.9.5
CVSS
9.8 (critical)
Published
2025-12-11
Title
Hippoo Mobile App for WooCommerce < 1.7.2 - Missing Authorization to Unauthenticated Limited File Write
Fixed in
Fixed in 1.7.2
CVSS
5.3 (medium)
Published
2025-12-09
Title
Hippoo Mobile App for WooCommerce < 1.7.2 - Unauthenticated Arbitrary File Read
Fixed in
Fixed in 1.7.2
CVSS
7.5 (high)