WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
product-catalog-feed
Published
2023-12-05
Title
Product Catalog Feed by PixelYourSite < 2.2.0 - Cross-Site Request Forgery
Slug
product-category-tree
Published
2023-10-18
Title
Product Category Tree <= 2.5 - Reflected XSS
Slug
product-category-tree
Published
2023-10-17
Title
Product Category Tree <= 2.5 - CSRF
Slug
product-code-for-woocommerce
Published
2023-12-27
Title
Product Code for WooCommerce < 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
product-code-for-woocommerce
Published
2025-05-19
Title
Product Code for WooCommerce < 1.5.1 - Cross-Site Request Forgery to Database Update
Slug
product-configurator-for-woocommerce
Published
2022-06-06
Title
Product Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File Deletion
Slug
product-configurator-for-woocommerce
Published
2025-07-30
Title
Product Configurator for WooCommerce < 1.5.0 - Cross-Site Request Forgery
Slug
product-countdown-for-woocommerce
Published
2025-05-07
Title
Product Time Countdown for WooCommerce < 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
product-countdown-for-woocommerce
Published
2025-09-22
Title
Product Time Countdown for WooCommerce <= 1.6.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Slug
product-customizer-light
Published
2024-10-17
Title
Product Customizer Light <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
product-delivery-date
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-delivery-date-for-woocommerce-lite
Published
2024-01-03
Title
Product Delivery Date for WooCommerce – Lite < 2.7.1 - Missing Authorization
Slug
product-delivery-date-for-woocommerce-lite
Published
2024-07-11
Title
Product Delivery Date for WooCommerce – Lite < 2.7.3 - Missing Authorization
Slug
product-delivery-date-for-woocommerce-lite
Published
2024-10-03
Title
Product Delivery Date for WooCommerce – Lite < 2.7.4 - Reflected Cross-Site Scripting
Slug
product-delivery-date-for-woocommerce-lite
Published
2024-11-12
Title
Product Delivery Date for WooCommerce - Lite < 2.8.1 - Reflected Cross-Site Scripting
Slug
product-delivery-date-for-woocommerce-lite
Published
2025-12-29
Title
Product Delivery Date for WooCommerce – Lite < 3.3.0 - Missing Authorization
Slug
product-designer
Published
2024-04-05
Title
Product Designer < 1.0.33 - Unauthenticated PHP Object Injection
Slug
product-designer
Published
2024-07-08
Title
Product Designer < 1.0.34 - Unauthenticated Arbitrary Attachment Deletion
Slug
product-designer
Published
2024-11-20
Title
Product Designer < 1.0.37 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
product-enquiry-for-woocommerce
Published
2024-06-22
Title
Product Enquiry for WooCommerce < 3.1.8 - Admin+ Stored XSS
Slug
product-expiry-for-woocommerce
Published
2024-01-02
Title
Product Expiry for WooCommerce < 2.6 - Subscriber+ Settings Update
Slug
product-filter-for-woocommerce-product
Published
2022-04-13
Title
Product Filter For WooCommerce Product <= 1.3.0 - Unauthenticated SQLi
Slug
product-filter-widget-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-gtin-ean-upc-isbn-for-woocommerce
Published
2023-02-13
Title
Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSS
Slug
product-image-watermark-for-woo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius