WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-shipping-multiple-addresses
Published
2023-06-26
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Billing Address Update via CSRF
Slug
woocommerce-shipping-multiple-addresses
Published
2023-07-10
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Customer+ Shipping Address Update
Slug
woocommerce-shipping-multiple-addresses
Published
2023-07-10
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Reflected Cross-Site Scripting
Slug
woocommerce-shipping-multiple-addresses
Published
2022-10-05
Title
WooCommerce Ship to Multiple Addresses < 3.7.2 - Reflected Cross-Site Scripting
Slug
woocommerce-shipping-multiple-addresses
Published
2022-10-05
Title
WooCommerce Ship to Multiple Addresses < 3.7.2 - Address Creation/Update/Deletion via CSRF
Slug
woocommerce-shipping-multiple-addresses
Published
2023-12-27
Title
WooCommerce Ship to Multiple Addresses < 3.8.10 - Missing Authorization
Slug
woocommerce-shipping-per-product
Published
2023-12-27
Title
WooCommerce Shipping Per Product < 2.5.5 - Missing Authorization
Slug
woocommerce-simple-registration
Published
2024-04-15
Title
Simple Registration for WooCommerce < 1.5.7 - Unauthenticated Privilege Escalation
Slug
woocommerce-simple-registration
Published
2025-10-24
Title
Simple Registration for WooCommerce < 1.5.9 - Cross-Site Request Forgery to Privilege Escalation via Role Request Approval
Slug
woocommerce-smart-coupons
Published
2020-03-04
Title
WooCommerce Smart Coupons < 4.6.5 - Unauthenticated Coupon Creation
Slug
woocommerce-social-media-share-buttons
Published
2024-03-29
Title
Woocommerce Social Media Share Buttons <= 1.3.0 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
woocommerce-square
Published
2026-01-09
Title
WooCommerce Square < 5.1.2 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id
Slug
woocommerce-stock-manager
Published
2016-07-26
Title
WooCommerce Stock Manager < 1.0.9 - CSRF and Lack of Authorisation
Slug
woocommerce-stock-manager
Published
2021-06-14
Title
Woocommerce Stock Manager < 2.6.0 - CSRF to Arbitrary File Upload
Slug
woocommerce-stock-manager
Published
2023-06-15
Title
WooCommerce Stock Manager < 2.11.0 - Cross-Site Request Forgery
Slug
woocommerce-stock-manager
Published
2026-01-09
Title
Stock Manager for WooCommerce < 3.6.0 - Cross-Site Request Forgery
Slug
woocommerce-store-toolkit
Published
2016-02-08
Title
WooCommerce - Store Toolkit Plugin <= 1.5.6 - Privilege Escalation
Slug
woocommerce-store-toolkit
Published
2016-02-10
Title
Woocommerce Store Toolkit < 1.5.8 - Privilege Escalation
Slug
woocommerce-store-toolkit
Published
2022-01-10
Title
Store Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site Scripting
Slug
woocommerce-store-toolkit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-store-toolkit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-store-toolkit
Published
2025-07-15
Title
WooCommerce Store Toolkit < 2.4.4 - Unauthenticated Local File Inclusion
Slug
woocommerce-subscriptions
Published
2020-07-24
Title
WooCommerce Subscriptions < 2.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
woocommerce-subscriptions
Published
2020-04-02
Title
Woocommerce Subscriptions < 3.0.3 - CSRF to Cancel/Re-Activate Subscription
Slug
woocommerce-subscriptions
Published
2023-09-11
Title
WooCommerce Subscriptions < 4.6.0 - Subscription Suspension/Activation via CSRF