WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wooexim
Published
2025-01-16
Title
WOOEXIM – WooCommerce Export Import Plugin <= 5.0.0 - Unauthenticated PHP Object Injection
Slug
wooexim
Published
2025-01-02
Title
wooexim <= 5.0.0 - CSRF to Reflected XSS
Slug
woofilter-pro
Published
2025-06-03
Title
Product Filter Pro < 2.9.6 - Unauthenticated SQL Injection
Slug
woofunnels-aero-checkout
Published
2023-12-27
Title
FunnelKit Checkout < 3.11.0 - Subscriber+ Arbitrary Plugin Activation
Slug
woofunnels-aero-checkout
Published
2023-12-27
Title
FunnelKit Checkout < 3.11.0 - Subscriber+ Settings Update
Slug
woofunnels-aero-checkout
Published
2023-12-27
Title
FunnelKit Checkout < 3.11.0 - Unauthenticated Arbitrary Content Deletion
Slug
wookit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woolementor
Published
2024-06-11
Title
CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More < 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
woolementor
Published
2024-06-12
Title
CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More < 4.5 - Unauthenticated PHP Object Injection
Slug
woolementor
Published
2025-01-13
Title
CoDesigner WooCommerce Builder for Elementor <= 4.28.2 - Author+ Stored XSS
Slug
woolementor
Published
2025-09-22
Title
CoDesigner <= 4.26 - Missing Authorization
Slug
woolentor-addons
Published
2021-04-13
Title
WooLentor - WooCommerce Elementor Addons + Builder < 1.8.6 - Contributor+ Stored XSS
Slug
woolentor-addons
Published
2023-01-28
Title
ShopLentor < 2.5.4 - PHP Object Injection
Slug
woolentor-addons
Published
2023-01-28
Title
ShopLentor < 2.5.4 - Contributor+ Stored XSS
Slug
woolentor-addons
Published
2023-02-06
Title
ShopLentor < 2.5.2 - Settings Update via CSRF
Slug
woolentor-addons
Published
2023-07-05
Title
ShopLentor < 2.6.3 - Settings Update via CSRF
Slug
woolentor-addons
Published
2024-03-14
Title
ShopLentor < 2.8.2 - Contributor+ Stored Cross-Site Scripting via Banner Link
Slug
woolentor-addons
Published
2024-04-03
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout
Slug
woolentor-addons
Published
2024-04-04
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.8.5 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget
Slug
woolentor-addons
Published
2024-04-18
Title
ShopLentor < 2.8.2 - Contributor+ Template Reset
Slug
woolentor-addons
Published
2024-04-19
Title
ShopLentor < 2.8.2 - Contributor+ Stored XSS
Slug
woolentor-addons
Published
2024-05-02
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.8.8 - Contributor+ Stored XSS
Slug
woolentor-addons
Published
2024-05-03
Title
ShopLentor (formerly WooLentor) < 2.8.8 - Missing Authorization
Slug
woolentor-addons
Published
2024-05-20
Title
ShopLentor < 2.8.9 - Authenticated Option Update
Slug
woolentor-addons
Published
2024-05-20
Title
ShopLentor < 2.8.9 - Contributor+ Stored XSS via woolentorsearch Shortcode