WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
waitlist-woocommerce
Published
2026-10-22
Title
Waitlist Woocommerce ( Back in stock notifier ) < 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
waitlist-woocommerce
Published
2026-10-27
Title
Waitlist Woocommerce ( Back in stock notifier ) < 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute
Slug
walk-score
Published
2014-06-12
Title
Walk Score <= 0.5.5 - Multiple XSS
Slug
walker-core
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
walker-core
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
walker-core
Published
2025-11-19
Title
Walker Core < 1.3.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
walker-elementor
Published
2025-12-31
Title
Walker for Elementor <= 1.1.6 - Missing Authorization
Slug
wallet-system-for-woocommerce
Published
2024-04-12
Title
Wallet System for WooCommerce < 2.5.10 - Cross-Site Request Forgery
Slug
wallet-system-for-woocommerce
Published
2024-07-11
Title
Wallet System for WooCommerce < 2.5.14 - Information Exposure via Log Files
Slug
wallet-system-for-woocommerce
Published
2025-03-03
Title
Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction < 2.6.3 - Cross-Site Request Forgery
Slug
wallet-system-for-woocommerce
Published
2025-03-03
Title
Wallet System for WooCommerce < 2.6.3 - Missing Authorization
Slug
wallet-system-for-woocommerce
Published
2025-04-10
Title
Wallet System for WooCommerce < 2.6.9 - Reflected Cross-Site Scripting
Slug
wallet-system-for-woocommerce
Published
2025-07-16
Title
Wallet System for WooCommerce < 2.6.8 - Cross-Site Request Forgery
Slug
wallet-system-for-woocommerce
Published
2025-12-29
Title
Wallet System for WooCommerce < 2.7.4 - Authenticated (Subscriber+) Information Exposure
Slug
wallet-system-for-woocommerce
Published
2026-01-16
Title
Wallet System for WooCommerce < 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation
Slug
wallet-system-for-woocommerce
Published
2026-04-29
Title
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments < 2.7.6 - Missing Authorization
Slug
wallet-system-for-woocommerce
Published
2026-06-29
Title
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments < 2.7.7 - Missing Authorization
Slug
wallet-system-for-woocommerce
Published
2026-08-10
Title
Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount
Slug
wallet-system-for-woocommerce
Published
2026-10-06
Title
Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Arbitrary Wallet Balance Theft via IDOR
Slug
wallet-system-for-woocommerce
Published
2026-10-06
Title
Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount
Slug
wallet-system-for-woocommerce
Published
2026-10-06
Title
Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export
Slug
wallet-system-for-woocommerce
Published
2026-10-06
Title
Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Forged Wallet Withdrawal Request via IDOR
Slug
wallet-system-for-woocommerce
Published
2026-10-27
Title
Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR
Slug
wallwisher-shortcode
Published
2025-11-20
Title
Padlet Shortcode <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wamate-confirm
Published
2026-02-10
Title
WaMate Confirm < 2.0.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Phone Number Blocking/Unblocking