WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-checkout-for-digital-goods
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-checkout-regsiter-field-editor
Published
2024-04-05
Title
WooCommerce Checkout Field Editor (Checkout Manager) < 2.1.9 - Cross-Site Request Forgery
Slug
woo-clover-gateway-by-zaytech
Published
2024-03-22
Title
WooCommerce Clover Payment Gateway < 1.3.2 - Missing Authorization via callback_handler
Slug
woo-clover-gateway-by-zaytech
Published
2026-07-06
Title
Clover Payment Gateway by Zaytech for WooCommerce < 1.3.6 - Unauthenticated Payment Bypass via check_order
Slug
woo-codice-fiscale
Published
2025-02-21
Title
WOO Codice Fiscale <= 1.6.3 - Reflected Cross-Site Scripting
Slug
woo-combo-offers
Published
2025-12-30
Title
Combo Offers WooCommerce < 4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-coming-soon-product
Published
2026-02-10
Title
WooCommerce Coming Soon Product with Countdown < 5.1 - Authenticated (Subscriber+) Local File Inclusion
Slug
woo-coming-soon-product
Published
2026-02-25
Title
WooCommerce Coming Soon Product with Countdown <= 5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
woo-commerce-min-weight
Published
2026-05-11
Title
Woo Commerce Minimum Weight <= 3.0.1 - Cross-Site Request Forgery via Settings Update Form
Slug
woo-conditional-discount-rules-for-checkout
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-conditional-discount-rules-for-checkout
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-conditional-discount-rules-for-checkout
Published
2023-10-04
Title
WooCommerce Dynamic Pricing and Discount Rules < 2.4.1 - CSRF
Slug
woo-conditional-payment-gateways
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-conditional-payment-gateways
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-conditional-payment-gateways
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
woo-conditional-product-fees-for-checkout
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-conditional-product-fees-for-checkout
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-conditional-product-fees-for-checkout
Published
2026-02-19
Title
Extra Fees Plugin for WooCommerce < 4.3.4 - Cross-Site Request Forgery
Slug
woo-conditional-product-fees-for-checkout
Published
2026-10-28
Title
Extra Fees for WooCommerce <= 4.4.0 - Authenticated (Contributor+) PHP Object Injection
Slug
woo-confirmation-email
Published
2019-05-22
Title
User Email Verification for WooCommerce < 3.4.0 - CSRF leading to Option Update
Slug
woo-confirmation-email
Published
2018-11-27
Title
Woo Confirmation Email < 3.2.0 - Missing Access Controls to View Uploaded files
Slug
woo-confirmation-email
Published
2023-06-02
Title
User Email Verification for WooCommerce <= 3.5.0 - Authentication bypass via weak token generation
Slug
woo-confirmation-email
Published
2023-07-26
Title
User Email Verification for WooCommerce <= 3.5.0 - Reflected XSS
Slug
woo-country-restrictions-advanced
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-country-restrictions-advanced
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting