WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-maintenance-mode
Published
2024-10-21
Title
WooCommerce Maintenance Mode <= 2.0.1 - Reflected Cross-Site Scripting
Slug
woocommerce-menu-bar-cart
Published
2022-06-14
Title
WooCommerce Menu Cart < 2.12.0 - Reflected Cross-Site Scripting
Slug
woocommerce-menu-extension
Published
2023-12-19
Title
WooCommerce Menu Extension <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woocommerce-mercadopago
Published
2023-02-06
Title
Mercado Pago payments for WooCommerce < 6.4.0 - CSRF
Slug
woocommerce-mercadopago
Published
2024-07-19
Title
Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download
Slug
woocommerce-mercadopago
Published
2026-05-05
Title
Mercado Pago payments for WooCommerce < 8.7.12 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure
Slug
woocommerce-mis-report
Published
2025-04-09
Title
WooCommerce Sales MIS Report <= 4.0.3 - Reflected Cross-Site Scripting
Slug
woocommerce-multi-currency
Published
2021-09-13
Title
WooCommerce Multi Currency < 2.1.18 - Authenticated Product Price Change
Slug
woocommerce-multi-currency
Published
2025-03-06
Title
CURCY - WooCommerce Multi Currency - Currency Switcher < 2.3.7 - Unauthenticated SQL Injection
Slug
woocommerce-multi-currency
Published
2025-05-16
Title
CURCY <= 2.3.7 - Missing Authorization to Arbitrary Shortcode Execution
Slug
woocommerce-multilingual
Published
2024-03-28
Title
WooCommerce Multilingual & Multicurrency < 5.3.5 - Missing Authorization
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-09-16
Title
WooCommerce Multilingual & Multicurrency < 5.3.7 - Missing Authorization
Slug
woocommerce-multilingual
Published
2024-10-07
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.8 - Reflected Cross-Site Scripting
Slug
woocommerce-multilingual
Published
2025-04-09
Title
WooCommerce Multilingual & Multicurrency < 5.3.9 - Unauthenticated Tax Sync Settings Update
Slug
woocommerce-multiple-addresses
Published
2025-05-06
Title
Woocommerce Multiple Addresses <= 1.0.7.1 - Authenticated (Subscriber+) Privilege Escalation
Slug
woocommerce-multiple-customer-addresses
Published
2023-02-27
Title
WooCommerce Multiple Customer Addresses & Shipping < 21.7 - Arbitrary Address Creation/Deletion/Access/Update via IDOR
Slug
woocommerce-multiple-free-gift
Published
2024-09-13
Title
WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding
Slug
woocommerce-myparcel
Published
2024-12-12
Title
MyParcel < 4.24.2 - Reflected Cross-Site Scripting
Slug
woocommerce-myparcel
Published
2026-07-10
Title
MyParcel < 4.25.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Data Disclosure and Modification via wcmp_get_shipment_options and wcmp_save_shipment_options AJAX Actions
Slug
woocommerce-ninjaforms-product-addons
Published
2023-10-16
Title
WooCommerce Ninja Forms Product Add-ons < 1.7.1 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-notify-updated-product
Published
2025-09-05
Title
Woocommerce Notify Updated Product <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting