WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-products-widgets-for-elementor
Published
2022-12-21
Title
Woo Products Widgets For Elementor < 1.0.8 - Contributor+ Stored XSS via Shortcode
Slug
woo-products-widgets-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-products-widgets-for-elementor
Published
2024-08-12
Title
Woo Products Widgets For Elementor <= 2.0.4 - Contributor+ Local File Inclusion
Slug
woo-producttables-pro
Published
2024-08-22
Title
WBW Product Table Pro < 1.9.5 - Unauthenticated Arbitrary SQL Execution
Slug
woo-producttables-pro
Published
2025-05-30
Title
WBW Product Table PRO <= 2.1.3 - Unauthenticated SQL Injection
Slug
woo-qiwi-payment-gateway
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
woo-quick-cart-for-multiple-variations
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-quick-cart-for-multiple-variations
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-quick-reports
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-quick-reports
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-quick-view
Published
2025-01-24
Title
WooCommerce Quick View < 1.1.3 - Unauthenticated Information Disclosure
Slug
woo-quickview
Published
2025-09-22
Title
Quick View for WooCommerce < 2.2.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-quickview
Published
2025-11-26
Title
Quick View for WooCommerce < 2.2.18 - Unauthenticated Private Product Disclosure
Slug
woo-quote-calculator-order
Published
2024-10-25
Title
Woocommerce Quote Calculator <= 1.1 - Unauthenticated SQL Injection
Slug
woo-quote-calculator-order
Published
2024-10-31
Title
Woocommerce Quote Calculator <= 1.1 - Authenticated (Contributor+) SQL Injection
Slug
woo-razorpay
Published
2023-11-28
Title
Razorpay for WooCommerce < 4.5.7 - Subscriber+ Transfers Manipulation
Slug
woo-razorpay
Published
2023-11-28
Title
Razorpay for WooCommerce < 4.5.7 - Transfers Manipulation via CSRF
Slug
woo-recargo-de-equivalencia
Published
2025-02-24
Title
WooCommerce Recargo de Equivalencia <= 1.6.24 - Cross-Site Request Forgery
Slug
woo-recent-purchases
Published
2024-05-27
Title
Woocommerce – Recent Purchases <= 1.0.1 - Authenticated (Admin+) Local File Inclusion
Slug
woo-refund-and-exchange-lite
Published
2022-12-05
Title
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
Slug
woo-refund-and-exchange-lite
Published
2025-02-13
Title
Return Refund and Exchange For WooCommerce < 4.4.6 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
woo-refund-and-exchange-lite
Published
2025-02-13
Title
Return Refund and Exchange For WooCommerce < 4.4.6 - Subscriber+ IDOR
Slug
woo-refund-and-exchange-lite
Published
2025-11-20
Title
Return Refund and Exchange For WooCommerce < 4.5.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Refund Request Cancellation
Slug
woo-refund-and-exchange-lite
Published
2025-11-20
Title
Return Refund and Exchange For WooCommerce < 4.5.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Order Message Read
Slug
woo-related-products-refresh-on-reload
Published
2023-10-29
Title
Related Products for WooCommerce < 3.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode