WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-product-attachment
Published
2026-09-01
Title
Product Attachment for WooCommerce < 2.3.5 - Unauthenticated Information Exposure
Slug
woo-product-builder
Published
2026-10-01
Title
BuildKit – Product Builder for WooCommerce – Custom PC Builder < 1.0.29 - Authenticated (Contributor+) SQL Injection
Slug
woo-product-builder
Published
2026-10-03
Title
BuildKit < 1.0.29 - Unauthenticated Cart Data Manipulation
Slug
woo-product-builder
Published
2026-09-30
Title
BuildKit < 1.0.29 - Contributor+ Stored SQLi via list_content Parameter
Slug
woo-product-bundle
Published
2023-12-28
Title
WPC Product Bundles for WooCommerce < 7.3.2 - Cross-Site Request Forgery
Slug
woo-product-bundle
Published
2026-02-22
Title
WPC Product Bundles for WooCommerce < 8.4.6 - Missing Authorization
Slug
woo-product-bundle
Published
2026-06-01
Title
WPC Product Bundles for WooCommerce < 8.5.4 - Missing Authorization
Slug
woo-product-bundle
Published
2026-09-21
Title
WPC Product Bundles for WooCommerce < 8.6.7 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2024-03-05
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.9.8 - Authenticated(Contributor+) PHP Object Injection
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2024-09-16
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.10.0 - Contributor+ Local File Inclusion
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2024-12-11
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.10.0 - Authenticated (Contributor+) Local File Inclusion via 'theme'
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2025-01-24
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.10.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
woo-product-category-discount
Published
2024-01-24
Title
Category Discount Woocommerce < 4.13 - Missing Authorization via wpcd_save_discount()
Slug
woo-product-category-discount
Published
2026-09-23
Title
Simple Discount Rules for Woocommerce < 5.19 - Authenticated (Administrator+) SQL Injection
Slug
woo-product-design
Published
2024-10-25
Title
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
woo-product-design
Published
2024-10-29
Title
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Download
Slug
woo-product-design
Published
2024-10-28
Title
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Deletion
Slug
woo-product-enquiry
Published
2023-11-08
Title
WooCommerce Product Enquiry <= 2.3.4 - Unauthenticated Stored XSS
Slug
woo-product-feed-pro
Published
2021-12-23
Title
Product Feed PRO for WooCommerce < 11.0.7 - Subscriber+ Settings Update to Stored XSS
Slug
woo-product-feed-pro
Published
2022-02-01
Title
Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting
Slug
woo-product-feed-pro
Published
2023-03-22
Title
Product Feed PRO for WooCommerce < 12.4.5 - Multiple CSRF
Slug
woo-product-feed-pro
Published
2024-03-26
Title
Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More < 13.2.6 - Reflected Cross-Site Scripting
Slug
woo-product-feed-pro
Published
2024-04-15
Title
Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More < 13.3.2 - Sensitive Information Exposure via Log Files
Slug
woo-product-feed-pro
Published
2026-04-07
Title
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce 13.4.6 - 13.5.2.1 - Cross-Site Request Forgery to Multiple Administrative Actions
Slug
woo-product-feed-pro
Published
2026-03-05
Title
Product Feed PRO for WooCommerce < 13.5.2.1 - Cross-Site Request Forgery