Plugin icon

WowStore – Store Builder & Product Blocks for WooCommerce

product-blocks

Vulnerabilities:

6

Last Updated:

August 11, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-07-28
Title
WowStore < 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'filterMobileText' Block Attribute
Fixed in
Fixed in 4.5.0
CVSS
5.5 (medium)
Published
2026-07-28
Title
WowStore < 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'currentPostId' Block Attribute
Fixed in
Fixed in 4.5.0
CVSS
5.5 (medium)
Published
2026-03-16
Title
WowStore – Store Builder & Product Blocks for WooCommerce < 4.4.4 - Unauthenticated SQL Injection via 'search' Parameter
Fixed in
Fixed in 4.4.4
CVSS
7.5 (high)
Published
2025-04-16
Title
WowStore < 4.2.5 - Missing Authorization
Fixed in
Fixed in 4.2.5
CVSS
4.3 (medium)
Published
2024-01-30
Title
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks < 3.1.5 - PHP Object Injection via wopb_wishlist and wopb_compare
Fixed in
Fixed in 3.1.5
CVSS
9.8 (critical)
Published
2023-10-06
Title
ProductX – Gutenberg WooCommerce Blocks < 3.0.0 - Missing Authorization via option_data_save
Fixed in
Fixed in 3.0.0
CVSS
4.3 (medium)