WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-better-customer-list
Published
2025-02-21
Title
Better Customer List for WooCommerce <= 1.2.3 - Reflected Cross-Site Scripting
Slug
woo-bigpost-shipping
Published
2025-09-29
Title
Big Post Shipping for WooCommerce < 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-billing-with-invoicexpress
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
woo-billingo-plus
Published
2022-09-14
Title
Multiple Plugins from Viszt Peter - Multiple CSRF
Slug
woo-binary-mlm
Published
2025-01-06
Title
Binary MLM Woocommerce < 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
woo-binary-mlm
Published
2025-01-06
Title
Binary MLM Woocommerce < 2.1 - Reflected Cross-Site Scripting via 'page'
Slug
woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers
Published
2023-07-26
Title
Fraud Prevention For Woocommerce < 2.1.6 - Settings Update via CSRF
Slug
woo-booking-bundle-hours
Published
2025-09-09
Title
WooCommerce Booking Bundle Hours < 0.7.5 - Cross-Site Request Forgery
Slug
woo-bookings-calendar
Published
2024-03-29
Title
WooCommerce Bookings Calendar <= 1.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-bought-together
Published
2024-04-17
Title
WPC Frequently Bought Together for WooCommerce < 7.0.4 - Missing Authorization
Slug
woo-bought-together
Published
2024-08-16
Title
WPC Frequently Bought Together for WooCommerce < 7.2.0 - Missing Authorization
Slug
woo-bulk-edit-products
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-bulk-edit-products
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-bulk-editor
Published
2023-05-22
Title
BEAR < 1.1.3.2 - Cross-Site Request Forgery (CSRF)
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF