WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-shipping-dpd-baltic
Published
2022-11-16
Title
WooCommerce Shipping - DPD baltic < 1.2.11 - Admin+ Stored XSS
Slug
woo-shipping-dpd-baltic
Published
2022-11-21
Title
WooCommerce Shipping - DPD baltic < 1.2.57 - Subscriber+ Arbitrary Options Deletion
Slug
woo-shipping-dpd-baltic
Published
2024-10-17
Title
DPD Baltic Shipping < 1.2.84 - Reflected Cross-Site Scripting
Slug
woo-show-single-variations-shop-category
Published
2025-11-28
Title
Show Variations as Single Products Woocommerce < 3.0 - Missing Authorization
Slug
woo-simple-frontend-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-simple-frontend-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-single-page-checkout
Published
2025-09-05
Title
WooCommerce Single Page Checkout <= 1.2.7 - Cross-Site Request Forgery
Slug
woo-slider-pro-drag-drop-slider-builder-for-woocommerce
Published
2025-05-29
Title
Woo Slider Pro - Drag Drop Slider Builder For WooCommerce <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
woo-slider-pro-drag-drop-slider-builder-for-woocommerce
Published
2025-05-30
Title
Woo Slider Pro <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
woo-smart-compare
Published
2025-07-10
Title
WPC Smart Compare for WooCommerce < 6.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-smart-compare
Published
2025-08-18
Title
WPC Smart Compare for WooCommerce < 6.4.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
woo-smart-quick-view
Published
2024-04-12
Title
WPC Smart Quick View for WooCommerce < 4.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
woo-smart-quick-view
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Slug
woo-smart-quick-view
Published
2025-08-19
Title
WPC Smart Quick View for WooCommerce < 4.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcode
Slug
woo-smart-quick-view
Published
2025-10-17
Title
WPC Smart Quick View for WooCommerce < 4.2.6 - Insecure Direct Object Reference to Unauthenticated Private Product Exposure
Slug
woo-smart-wishlist
Published
2022-03-01
Title
WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting
Slug
woo-smart-wishlist
Published
2022-04-25
Title
WPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site Scripting
Slug
woo-smart-wishlist
Published
2023-06-03
Title
WPC Smart Wishlist for WooCommerce < 4.7.2 - Add/Remove Wishlist Items via CSRF
Slug
woo-smart-wishlist
Published
2025-10-10
Title
WPC Smart Wishlist for WooCommerce < 5.0.4 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
Slug
woo-smart-wishlist
Published
2025-10-17
Title
WPC Smart Wishlist for WooCommerce < 5.0.5 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
Slug
woo-smart-wishlist
Published
2026-02-22
Title
WPC Smart Wishlist for WooCommerce < 5.0.9 - Missing Authorization
Slug
woo-social-login
Published
2024-06-14
Title
WooCommerce - Social Login < 2.6.3 - Unauthenticated PHP Object Injection
Slug
woo-social-login
Published
2024-06-14
Title
WooCommerce - Social Login < 2.6.3 - Email Verification due to Insufficient Randomness
Slug
woo-social-login
Published
2024-07-05
Title
WooCommerce Social Login < 2.7.0 - Unauthenticated PHP Object Injection
Slug
woo-social-login
Published
2024-07-19
Title
WooCommerce - Social Login < 2.7.4 - Missing Authorization to Unauthenticated Privilege Escalation