WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-smart-quick-view
Published
2025-08-19
Title
WPC Smart Quick View for WooCommerce < 4.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcode
Slug
woo-smart-quick-view
Published
2025-10-17
Title
WPC Smart Quick View for WooCommerce < 4.2.6 - Insecure Direct Object Reference to Unauthenticated Private Product Exposure
Slug
woo-smart-wishlist
Published
2022-03-01
Title
WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting
Slug
woo-smart-wishlist
Published
2022-04-25
Title
WPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site Scripting
Slug
woo-smart-wishlist
Published
2023-06-03
Title
WPC Smart Wishlist for WooCommerce < 4.7.2 - Add/Remove Wishlist Items via CSRF
Slug
woo-smart-wishlist
Published
2025-10-10
Title
WPC Smart Wishlist for WooCommerce < 5.0.4 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
Slug
woo-smart-wishlist
Published
2025-10-17
Title
WPC Smart Wishlist for WooCommerce < 5.0.5 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
Slug
woo-social-login
Published
2024-06-14
Title
WooCommerce - Social Login < 2.6.3 - Unauthenticated PHP Object Injection
Slug
woo-social-login
Published
2024-06-14
Title
WooCommerce - Social Login < 2.6.3 - Email Verification due to Insufficient Randomness
Slug
woo-social-login
Published
2024-07-05
Title
WooCommerce Social Login < 2.7.0 - Unauthenticated PHP Object Injection
Slug
woo-social-login
Published
2024-07-19
Title
WooCommerce - Social Login < 2.7.4 - Missing Authorization to Unauthenticated Privilege Escalation
Slug
woo-social-login
Published
2024-07-19
Title
WooCommerce - Social Login < 2.7.4 - Unauthenticated Authentication Bypass
Slug
woo-social-login
Published
2024-07-19
Title
WooCommerce - Social Login < 2.7.4 - Unauthenticated Privilege Escalation via One-Time Password
Slug
woo-social-login
Published
2024-08-09
Title
WooCommerce - Social Login < 2.7.6 - Authentication Bypass to Account Takeover
Slug
woo-social-login
Published
2024-11-04
Title
Social Login - WordPress / WooCommerce Plugin < 2.7.8 - Authentication Bypass
Slug
woo-social-login
Published
2025-04-16
Title
WooCommerce Social Login < 2.8.3 - Cross-Site Request Forgery
Slug
woo-store-mode
Published
2025-01-16
Title
Woo Store Mode <= 1.0.1 - Reflected Cross-Site Scripting
Slug
woo-stripe-payment
Published
2021-10-01
Title
Stripe For WooCommerce 3.0.0 - 3.3.9 - Missing Authorization Controls to Financial Account Hijacking
Slug
woo-superb-slideshow-transition-gallery-with-random-effect
Published
2025-10-02
Title
Woo superb slideshow transition gallery with random effect <= 9.1 - Authenticated (Contributor+) SQL Injection
Slug
woo-swatches-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-tbc-payment-gateway
Published
2025-04-10
Title
WooCommerce TBC Credit Card Payment Gateway (Free) <= 2.0.0 - Reflected Cross-Site Scripting
Slug
woo-thank-you-page-customizer
Published
2023-03-22
Title
Thank You Page Customizer for WooCommerce – Increase Your Sales < 1.0.14 - CSRF
Slug
woo-thank-you-page-customizer
Published
2024-02-26
Title
Thank You Page Customizer for WooCommerce – Increase Your Sales < 1.1.3 - Missing Authorization to Authenticated (Subscriber+) Data Export
Slug
woo-thank-you-page-customizer
Published
2024-02-26
Title
Thank You Page Customizer for WooCommerce – Increase Your Sales < 1.1.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
woo-thank-you-page-customizer
Published
2025-08-11
Title
Thank You Page Customizer for WooCommerce – Increase Your Sales < 1.1.8 - Missing Authorization