WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-04-24
Title
PDF Invoices & Packing Slips for WooCommerce < 3.8.1 - Unauthenticated Stored Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-04-24
Title
PDF Invoices & Packing Slips for WooCommerce < 3.8.1 - Unauthenticated Server-Side Request Forgery
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-10-24
Title
WooCommerce PDF Invoices & Packing Slips < 3.8.7 - Missing Authorization
Slug
woocommerce-pdf-invoices-packing-slips
Published
2025-12-07
Title
WooCommerce PDF Invoices & Packing Slips < 5.0.0 - Missing Authorization
Slug
woocommerce-pdf-vouchers
Published
2024-07-23
Title
WooCommerce - PDF Vouchers < 4.9.4 - Authentication Bypass to Voucher Vendor
Slug
woocommerce-pdf-vouchers
Published
2024-08-01
Title
WooCommerce PDF Vouchers < 4.9.5 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-vouchers
Published
2024-08-01
Title
WooCommerce PDF Vouchers < 4.9.5 - Unauthenticated Arbitrary File Deletion
Slug
woocommerce-pdf-vouchers
Published
2024-08-01
Title
WooCommerce PDF Vouchers < 4.9.5 - Missing Authorization
Slug
woocommerce-pdf-vouchers
Published
2024-12-19
Title
WooCommerce PDF Vouchers < 4.9.9 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-vouchers
Published
2024-12-11
Title
WooCommerce PDF Vouchers < 4.9.9 - Authentication Bypass
Slug
woocommerce-photo-reviews
Published
2024-09-10
Title
WooCommerce Photo Reviews Premium < 1.3.14 - Authentication Bypass to Account Takeover and Privilege Escalation
Slug
woocommerce-photo-reviews
Published
2025-06-03
Title
WooCommerce Photo Reviews - Review Reminders - Review for Discounts <= 1.3.13 - Reflected Cross-Site Scripting
Slug
woocommerce-pos
Published
2024-03-19
Title
WooCommerce POS < 1.4.12 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure
Slug
woocommerce-pos
Published
2025-05-16
Title
WooCommerce POS < 1.7.9 - Missing Authorization
Slug
woocommerce-pre-orders
Published
2023-06-21
Title
WooCommerce Pre-Orders < 2.0.1 - Contributor+ Stored XSS
Slug
woocommerce-pre-orders
Published
2023-06-26
Title
WooCommerce Pre-Orders < 2.0.2 - Reflected XSS
Slug
woocommerce-pre-orders
Published
2023-07-10
Title
WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF
Slug
woocommerce-pre-orders
Published
2023-07-10
Title
WooCommerce Pre-Orders < 2.0.3 - Unauthorised Actions via CSRF
Slug
woocommerce-pre-orders
Published
2023-05-15
Title
WooCommerce Pre-Orders < 2.0.0 - Reflected XSS
Slug
woocommerce-predictive-search
Published
2014-08-01
Title
WooCommerce Predictive Search - index.php rs Parameter XSS
Slug
woocommerce-predictive-search
Published
2024-07-10
Title
WooCommerce Predictive Search < 6.1.0 - Reflected Cross-Site Scripting
Slug
woocommerce-product-addon
Published
2016-09-19
Title
WooCommerce Product Addons < 2.0 - Arbitrary File Upload
Slug
woocommerce-product-addon
Published
2019-08-10
Title
PPOM for WooCommerce <= 18.3 - Authenticated Stored XSS
Slug
woocommerce-product-addon
Published
2022-01-17
Title
PPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSS
Slug
woocommerce-product-addon
Published
2023-04-24
Title
Product Addons & Fields for WooCommerce < 32.0.6 - Admin+ Stored Cross-Site Scripting