WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-custom-emails
Published
2023-08-02
Title
Woo Custom Emails <= 2.2 - Reflected XSS
Slug
woo-custom-emails
Published
2023-10-17
Title
Woo Custom Emails <= 2.2 - Reflected XSS
Slug
woo-custom-product-addons
Published
2026-02-17
Title
Product Addons for Woocommerce – Product Options with Custom Fields < 3.1.1 - Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter
Slug
woo-custom-profile-picture
Published
2024-10-21
Title
Woocommerce Custom Profile Picture <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
woo-customers-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-customers-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-customers-manager
Published
2026-01-06
Title
Premmerce WooCommerce Customers Manager < 1.1.15 - Reflected Cross-Site Scripting
Slug
woo-customers-order-history
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-customers-order-history
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-customers-order-history
Published
2024-06-20
Title
Woocommerce Customers Order History <= 5.2.2 - Missing Authorization
Slug
woo-customers-spreadsheet-bulk-edit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-customers-spreadsheet-bulk-edit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-direct-checkout-button
Published
2025-02-24
Title
Direct Checkout Button for WooCommerce <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-direct-checkout-lite
Published
2025-06-05
Title
Direct Checkout for WooCommerce Lite <= 1.0.3 - Missing Authorization
Slug
woo-discount-rules
Published
2020-08-20
Title
Discount Rules for WooCommerce < 2.1.0 - Multiple Vulnerabilities
Slug
woo-discount-rules
Published
2020-09-17
Title
Discount Rules for WooCommerce < 2.2.1 - Multiple Authorization Bypass
Slug
woo-discount-rules
Published
2022-06-27
Title
Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting
Slug
woo-discount-rules
Published
2024-10-15
Title
Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons < 2.6.6 - Reflected Cross-Site Scripting
Slug
woo-document-preview
Published
2022-04-11
Title
Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation
Slug
woo-dynamic-pricing-discounts-lite
Published
2025-05-19
Title
Dynamic Pricing & Discounts Lite for WooCommerce <= 2.0.3 - Cross-Site Request Forgery
Slug
woo-easy-duplicate-product
Published
2023-08-15
Title
WooCommerce Easy Duplicate Product < 0.3.0.1 - Reflected XSS
Slug
woo-easy-duplicate-product
Published
2023-12-27
Title
WooCommerce Easy Duplicate Product < 0.3.0.8 - Missing Authorization via wedp_duplicate_product_action
Slug
woo-ecommerce-tracking-for-google-and-facebook
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-ecommerce-tracking-for-google-and-facebook
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-ecommerce-tracking-for-google-and-facebook
Published
2023-08-16
Title
Enhanced Ecommerce Google Analytics for WooCommerce < 3.7.2 - CSRF