WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
flexible-checkout-fields
Published
2024-04-05
Title
Flexible Checkout Fields for WooCommerce < 4.1.3 - Missing Authorization
Slug
flexible-cookies
Published
2025-03-27
Title
Flexible Cookies < 1.1.9 - Cross-Site Request Forgery
Slug
flexible-coupons
Published
2025-01-15
Title
Flexible PDF Coupons < 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
flexible-coupons
Published
2026-09-30
Title
Flexible PDF Coupons – Gift Cards & Vouchers for WooCommerce < 1.14.12 - Authenticated (Contributor+) Insecure Direct Object Reference
Slug
flexible-custom-post-type
Published
2011-11-17
Title
Flexible Custom Post Type < 0.1.7 - XSS
Slug
flexible-faq
Published
2025-09-22
Title
Flexible FAQ <= 0.2 - Cross-Site Request Forgery
Slug
flexible-faqs
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
flexible-faqs
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
flexible-invoices
Published
2025-09-22
Title
Flexible PDF Invoices for WooCommerce & WordPress < 6.0.14 - Cross-Site Request Forgery
Slug
flexible-quantity-measurement-price-calculator-for-woocommerce
Published
2026-09-10
Title
Flexible Quantity – Measurement Price Calculator for WooCommerce < 2.3.22 - Missing Authorization
Slug
flexible-quantity-measurement-price-calculator-for-woocommerce
Published
2026-10-12
Title
Flexible Quantity – Measurement Price Calculator for WooCommerce < 2.3.23 - Missing Authorization
Slug
flexible-quantity-measurement-price-calculator-for-woocommerce
Published
2026-10-15
Title
Flexible Quantity – Measurement Price Calculator for WooCommerce < 2.3.24 - Missing Authorization
Slug
flexible-quantity-measurement-price-calculator-for-woocommerce
Published
2026-10-29
Title
Flexible Quantity & Price Calculator for WooCommerce < 2.3.25 - Missing Authorization
Slug
flexible-refund-and-return-order-for-woocommerce
Published
2025-10-21
Title
Flexible Refund and Return Order for WooCommerce < 1.0.39 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Refund
Slug
flexible-refund-and-return-order-for-woocommerce
Published
2025-11-07
Title
Flexible Refund and Return Order for WooCommerce < 1.0.43 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update
Slug
flexible-refund-and-return-order-for-woocommerce
Published
2026-07-08
Title
Flexible Refund for WooCommerce – EU One Click Return < 1.0.52 - Authenticated (Customer+) Stored Cross-Site Scripting
Slug
flexible-shipping
Published
2022-06-14
Title
Flexible Shipping < 4.11.9 - Reflected Cross-Site Scripting
Slug
flexible-shipping
Published
2024-04-22
Title
Flexible Shipping < 4.24.16 - Missing Authorization
Slug
flexible-shipping-ups
Published
2024-04-11
Title
WooCommerce UPS Shipping – Live Rates and Access Points < 2.2.5 - Cross-Site Request Forgery
Slug
flexible-shipping-ups
Published
2024-10-24
Title
UPS Live Rates and Access Points < 3.0.0 - Missing Authorization to Plugin API key reset
Slug
flexible-shipping-usps
Published
2024-04-10
Title
USPS Shipping for WooCommerce – Live Rates < 1.9.3 - Cross-Site Request Forgery
Slug
flexible-shipping-usps
Published
2024-04-22
Title
USPS Shipping for WooCommerce – Live Rates < 1.10.0 - Sensitive Information Exposure
Slug
flexible-subscriptions
Published
2026-08-19
Title
Flexible Subscriptions < 1.8.2 - Authenticated (Customer+) PHP Object Injection
Slug
flexible-subscriptions
Published
2026-10-12
Title
Flexible Subscriptions < 1.8.5 - Missing Authorization
Slug
flexible-wishlist
Published
2025-01-28
Title
Flexible Wishlist for WooCommerce < 1.2.26 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter