Plugin icon

WPC Smart Messages for WooCommerce

wpc-smart-messages

Vulnerabilities:

4

Last Updated:

October 17, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-04-27
Title
WPC Smart Messages for WooCommerce < 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute
Fixed in
Fixed in 4.2.9
CVSS
5.5 (medium)
Published
2025-09-28
Title
WPC Smart Messages for WooCommerce < 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.2.9
CVSS
5.5 (medium)
Published
2024-10-28
Title
WPC Smart Messages for WooCommerce < 4.2.2 - Authenticated (Subscriber+) Local File Inclusion
Fixed in
Fixed in 4.2.2
CVSS
8.8 (high)
Published
2024-10-28
Title
WPC Smart Messages for WooCommerce < 4.2.2 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation
Fixed in
Fixed in 4.2.2
CVSS
4.3 (medium)