WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-mercadopago
Published
2024-07-19
Title
Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download
Slug
woocommerce-mis-report
Published
2025-04-09
Title
WooCommerce Sales MIS Report <= 4.0.3 - Reflected Cross-Site Scripting
Slug
woocommerce-multi-currency
Published
2021-09-13
Title
WooCommerce Multi Currency < 2.1.18 - Authenticated Product Price Change
Slug
woocommerce-multi-currency
Published
2025-03-06
Title
CURCY - WooCommerce Multi Currency - Currency Switcher < 2.3.7 - Unauthenticated SQL Injection
Slug
woocommerce-multi-currency
Published
2025-05-16
Title
CURCY <= 2.3.7 - Missing Authorization to Arbitrary Shortcode Execution
Slug
woocommerce-multilingual
Published
2024-03-28
Title
WooCommerce Multilingual & Multicurrency < 5.3.5 - Missing Authorization
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-09-16
Title
WooCommerce Multilingual & Multicurrency < 5.3.7 - Missing Authorization
Slug
woocommerce-multilingual
Published
2024-10-07
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.8 - Reflected Cross-Site Scripting
Slug
woocommerce-multilingual
Published
2025-04-09
Title
WooCommerce Multilingual & Multicurrency < 5.3.9 - Missing Authorization
Slug
woocommerce-multiple-addresses
Published
2025-05-06
Title
Woocommerce Multiple Addresses <= 1.0.7.1 - Authenticated (Subscriber+) Privilege Escalation
Slug
woocommerce-multiple-customer-addresses
Published
2023-02-27
Title
WooCommerce Multiple Customer Addresses & Shipping < 21.7 - Arbitrary Address Creation/Deletion/Access/Update via IDOR
Slug
woocommerce-multiple-free-gift
Published
2024-09-13
Title
WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding
Slug
woocommerce-myparcel
Published
2024-12-12
Title
MyParcel < 4.24.2 - Reflected Cross-Site Scripting
Slug
woocommerce-ninjaforms-product-addons
Published
2023-10-16
Title
WooCommerce Ninja Forms Product Add-ons < 1.7.1 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-notify-updated-product
Published
2025-09-05
Title
Woocommerce Notify Updated Product <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
woocommerce-openpos
Published
2024-07-09
Title
Woocommerce OpenPos < 7.0.1 - Unauthenticated SQL Injection
Slug
woocommerce-openpos
Published
2024-07-09
Title
Woocommerce OpenPos < 7.0.1 - Unauthenticated Arbitrary File Deletion
Slug
woocommerce-openpos
Published
2024-07-09
Title
Woocommerce OpenPos < 7.0.2 - Unauthenticated Sensitive Information Disclosure
Slug
woocommerce-order-address-print
Published
2023-05-30
Title
Woocommerce Order address Print <= 3.2 - Reflected XSS
Slug
woocommerce-order-barcodes
Published
2023-07-17
Title
WooCommerce Order Barcodes < 1.6.5 - Cross-Site Request Forgery
Slug
woocommerce-order-searching
Published
2025-01-16
Title
WooCommerce Order Search <= 1.1.0 - Reflected Cross-Site Scripting