WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-delivery-notes
Published
2024-12-23
Title
Print Invoice & Delivery Notes for WooCommerce < 5.4.1 - Missing Authorization to Authenticated (Subscriber+) Logo Deletion
Slug
woocommerce-delivery-notes
Published
2025-03-07
Title
Print Invoice & Delivery Notes for WooCommerce < 5.5.0 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
woocommerce-delivery-notes
Published
2025-06-05
Title
Print Invoice & Delivery Notes for WooCommerce < 5.6.0 - Cross-Site Request Forgery
Slug
woocommerce-delivery-notes
Published
2025-12-23
Title
Print Invoice & Delivery Notes for WooCommerce < 5.9.0 - Unauthenticated Remote Code Execution
Slug
woocommerce-delivery-notes
Published
2026-02-03
Title
Print Invoice & Delivery Notes for WooCommerce < 5.9.0 - Missing Authorization
Slug
woocommerce-delivery-notes
Published
2026-03-18
Title
Print Invoice & Delivery Notes for WooCommerce < 6.0.0 - Missing Authorization
Slug
woocommerce-digital-content-delivery-with-drm-flickrocket
Published
2025-01-06
Title
WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket < 4.76 - Reflected Cross-Site Scripting
Slug
woocommerce-discounts-plus
Published
2021-10-12
Title
Discounts Manager for Products < 3.4.5 - Reflected Cross-Site Scripting
Slug
woocommerce-display-products-by-tags
Published
2025-02-24
Title
WooCommerce Display Products by Tags <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woocommerce-dropshipping
Published
2022-10-17
Title
WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
Slug
woocommerce-dropshipping
Published
2024-06-06
Title
WooCommerce Dropshipping <= 5.1.2 - Unauthenticated Arbitrary Email Send
Slug
woocommerce-ean-payment-gateway
Published
2023-09-13
Title
WooCommerce EAN Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) EAN Update
Slug
woocommerce-email-inquiry-cart-options
Published
2026-01-26
Title
Email Inquiry & Cart Options for WooCommerce <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woocommerce-email-test
Published
2016-12-08
Title
WooCommerce Email Test 1.5 - Order Information Disclosure
Slug
woocommerce-es
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-es
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-eu-vat-assistant
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-eu-vat-assistant
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-exporter
Published
2014-10-11
Title
WooCommerce Store Exporter 1.7.5 - Cross Site Scripting (XSS)
Slug
woocommerce-exporter
Published
2016-02-10
Title
Woocommerce Exporter < 1.8.4 - Privilege Esclation
Slug
woocommerce-exporter
Published
2020-01-09
Title
WooCommerce - Store Exporter < 2.4 - CSV Injection
Slug
woocommerce-exporter
Published
2022-01-10
Title
WooCommerce – Store Exporter < 2.7.1 - Reflected Cross-Site Scripting (XSS)
Slug
woocommerce-exporter
Published
2023-10-29
Title
WooCommerce - Store Exporter < 2.7.2.1 - Reflected XSS
Slug
woocommerce-exporter
Published
2024-09-30
Title
Store Exporter for WooCommerce < 2.7.3 - Reflected Cross-Site Scripting
Slug
woocommerce-exporter
Published
2025-04-09
Title
WooCommerce – Store Exporter < 2.7.5 - Reflected Cross-Site Scripting