WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-easy-duplicate-product
Published
2023-12-27
Title
WooCommerce Easy Duplicate Product < 0.3.0.8 - Missing Authorization via wedp_duplicate_product_action
Slug
woo-ecommerce-tracking-for-google-and-facebook
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-ecommerce-tracking-for-google-and-facebook
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-ecommerce-tracking-for-google-and-facebook
Published
2023-08-16
Title
Enhanced Ecommerce Google Analytics for WooCommerce < 3.7.2 - CSRF
Slug
woo-edit-templates
Published
2023-11-07
Title
Edit WooCommerce Templates < 1.1.2 - Reflected XSS
Slug
woo-edit-templates
Published
2024-10-17
Title
Edit WooCommerce Templates <= 1.1.2 - Reflected Cross-Site Scripting via page
Slug
woo-email-control
Published
2016-07-19
Title
Woo Email Control <= 1.01 - Reflected Cross-Site Scripting (XSS) & CSRF
Slug
woo-enviopack
Published
2021-12-14
Title
WooCommerce EnvioPack <= 1.2 - Reflected Cross-Site Scripting
Slug
woo-epos-now-integration
Published
2026-10-05
Title
Integration for Epos Now and WooCommerce 4.6.0 - 4.11.1 - Unauthenticated Action Scheduler Queue Disclosure
Slug
woo-essential
Published
2026-08-24
Title
Woo Essential <= 4.3.0 - Unauthenticated SQL Injection
Slug
woo-esto
Published
2023-09-27
Title
Woocommerce ESTO < 2.23.2 - Settings Update via CSRF
Slug
woo-events
Published
2024-09-23
Title
WooEvents < 4.1.3 - Unauthenticated Arbitrary File Overwrite
Slug
woo-events
Published
2025-09-26
Title
WooEvents < 4.1.8 - Missing Authorization
Slug
woo-exfood
Published
2025-02-19
Title
WooCommerce Food - Restaurant Menu & Food ordering < 3.3.3 - Unauthenticated Arbitrary Shortcode Execution via ids
Slug
woo-extra-cost
Published
2021-07-05
Title
WooCommerce Extra Cost <= 2.6 - CSRF Bypass
Slug
woo-extra-flat-rate
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-extra-flat-rate
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-extra-product-options
Published
2026-09-30
Title
Extra Product Options For WooCommerce | Custom Product Addons and Fields < 3.3.9 - Authenticated (Shop Manager+) PHP Object Injection
Slug
woo-fattureincloud
Published
2025-03-27
Title
WooCommerce Fattureincloud < 2.6.8 - Reflected Cross-Site Scripting
Slug
woo-file-dropzone
Published
2026-02-05
Title
Woo File Dropzone <= 1.1.7 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
woo-fiscalita-italiana
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-fiscalita-italiana
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-floating-cart-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-floating-cart-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-floating-cart-lite
Published
2024-11-04
Title
XT Floating Cart for WooCommerce < 2.8.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload