WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-store-mode
Published
2025-01-16
Title
Woo Store Mode <= 1.0.1 - Reflected Cross-Site Scripting
Slug
woo-stripe-payment
Published
2021-10-01
Title
Stripe For WooCommerce 3.0.0 - 3.3.9 - Missing Authorization Controls to Financial Account Hijacking
Slug
woo-stripe-payment
Published
2026-07-23
Title
Payment Plugins for Stripe WooCommerce < 4.0.8 - Missing Authorization
Slug
woo-stripe-payment
Published
2026-07-23
Title
Payment Plugins for Stripe WooCommerce < 4.0.8 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret
Slug
woo-stripe-payment
Published
2026-09-07
Title
Payment Plugins for Stripe WooCommerce < 4.0.12 - Unauthenticated Customer PII Disclosure via order-pay
Slug
woo-stripe-payment
Published
2026-10-09
Title
Payment Plugins for Stripe WooCommerce < 4.0.18 - Reflected DOM-Based Cross-Site Scripting via '#response' URL Fragment
Slug
woo-suggestion-engine
Published
2026-08-26
Title
Suggestion Engine for WooCommerce < 2.0.12 - Authenticated (Contributor+) SQL Injection
Slug
woo-superb-slideshow-transition-gallery-with-random-effect
Published
2025-10-02
Title
Woo superb slideshow transition gallery with random effect <= 9.1 - Authenticated (Contributor+) SQL Injection
Slug
woo-swatches-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-swish-e-commerce
Published
2026-10-19
Title
BjornTech Swish for WooCommerce < 3.7.9 - Missing Authorization
Slug
woo-tbc-payment-gateway
Published
2025-04-10
Title
WooCommerce TBC Credit Card Payment Gateway (Free) <= 2.0.0 - Reflected Cross-Site Scripting
Slug
woo-thank-you-page-customizer
Published
2023-03-22
Title
Thank You Page Customizer for WooCommerce – Increase Your Sales < 1.0.14 - CSRF
Slug
woo-thank-you-page-customizer
Published
2024-02-26
Title
Thank You Page Customizer for WooCommerce – Increase Your Sales < 1.1.3 - Missing Authorization to Authenticated (Subscriber+) Data Export
Slug
woo-thank-you-page-customizer
Published
2024-02-26
Title
Thank You Page Customizer for WooCommerce – Increase Your Sales < 1.1.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
woo-thank-you-page-customizer
Published
2025-08-11
Title
Thank You Page Customizer for WooCommerce – Increase Your Sales < 1.1.8 - Missing Authorization
Slug
woo-thank-you-page-customizer
Published
2025-12-05
Title
Thank You Page Customizer for WooCommerce < 1.1.9 - Missing Authorization
Slug
woo-thank-you-page-customizer
Published
2026-09-08
Title
Thanko Thank You Page Customizer for WooCommerce – Increase Your Sales < 1.2.3 - Missing Authorization
Slug
woo-thank-you-page-customizer
Published
2026-10-08
Title
Thanko Thank You Page Customizer for WooCommerce < 1.2.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
woo-thank-you-page-nextmove-lite
Published
2024-02-09
Title
NextMove Lite < 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation
Slug
woo-thank-you-page-nextmove-lite
Published
2024-02-29
Title
NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure
Slug
woo-thank-you-page-nextmove-lite
Published
2024-04-11
Title
NextMove Lite < 2.18.2 - Cross-Site Request Forgery
Slug
woo-thank-you-page-nextmove-lite
Published
2025-02-27
Title
NextMove Lite – Thank You Page for WooCommerce < 2.20.0 - Missing Authorization to Authenticated (Subscriber+) Deactivation Reason Submission
Slug
woo-thank-you-page-nextmove-lite
Published
2025-10-18
Title
NextMove Lite < 2.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-thank-you-page-nextmove-lite
Published
2025-07-28
Title
NextMove Lite <= 2.21.0 - Reflected Cross-Site Scripting
Slug
woo-thank-you-page-nextmove-lite
Published
2026-01-15
Title
NextMove Lite < 2.24.0 - Unauthenticated Insecure Direct Object Reference