WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-ukrposhta
Published
2025-01-06
Title
Woo Ukrposhta < 1.18.0 - Reflected Cross-Site Scripting via order, post, and idd Parameters
Slug
woo-update-variations-in-cart
Published
2025-01-16
Title
Woo Update Variations In Cart <= 0.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
woo-ups-pickup
Published
2025-01-10
Title
Woo UPS Pickup < 2.6.6 - Reflected XSS
Slug
woo-ups-pickup
Published
2025-01-16
Title
OPSI Israel Domestic Shipments <= 2.8.2 - Missing Authorization
Slug
woo-variation-gallery
Published
2019-08-20
Title
Additional Variation Images for WooCommerce < 1.1.29 - Authenticated Stored XSS
Slug
woo-variation-swatches
Published
2019-08-20
Title
Variation Swatches for WooCommerce < 1.0.62 - Reflected XSS
Slug
woo-vehicle-parts-finder
Published
2025-09-30
Title
WooCommerce Vehicle Parts Finder < 3.8 - Unauthenticated Stored Cross-Site Scripting
Slug
woo-vehicle-parts-finder
Published
2025-10-01
Title
WooCommerce Vehicle Parts Finder < 3.8 - Unauthenticated PHP Object Injection
Slug
woo-viet
Published
2024-03-25
Title
Woo Viet < 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
woo-vietnam-checkout
Published
2022-12-09
Title
Woocommerce Vietnam Checkout < 2.0.5 - Reflected XSS
Slug
woo-vietnam-checkout
Published
2023-11-06
Title
Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS
Slug
woo-vietnam-checkout
Published
2024-02-05
Title
Woocommerce Vietnam Checkout < 2.0.8 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Slug
woo-vietnam-checkout
Published
2024-01-10
Title
Woocommerce Vietnam Checkout < 2.0.8 - Admin+ Stored Cross-Site Scripting
Slug
woo-vipps
Published
2023-12-27
Title
Pay with Vipps for WooCommerce < 1.14.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-wallet
Published
2022-11-14
Title
TeraWallet - For WooCommerce < 1.4.4 - Subscriber+ Arbitrary Wallet Lock/Unlock via IDOR
Slug
woo-wallet
Published
2022-10-30
Title
TeraWallet – For WooCommerce < 1.4.0 - Settings Update via CSRF
Slug
woo-wallet
Published
2024-03-07
Title
TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds < 1.4.11 - Missing Authorization to Authenticated (Subscriber+) User Email Export
Slug
woo-wallet
Published
2024-04-24
Title
TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds < 1.5.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Slug
woo-wallet
Published
2024-07-11
Title
Wallet for WooCommerce < 1.5.5 - Authenticated (Subscriber+) SQL Injection via 'search[value]'
Slug
woo-wallet
Published
2024-11-27
Title
Wallet for WooCommerce < 1.5.7 - Subscriber+ Funds Creation
Slug
woo-whatsapp-request-quote
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
woo-wholesale-pricing
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-wholesale-pricing
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-xendit-virtual-accounts
Published
2026-02-03
Title
Xendit Payment < 6.1.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Update to Paid
Slug
woo-zoho
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting