WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-multi-currency
Published
2025-03-06
Title
CURCY - WooCommerce Multi Currency - Currency Switcher < 2.3.7 - Unauthenticated SQL Injection
Slug
woocommerce-multi-currency
Published
2025-05-16
Title
CURCY <= 2.3.7 - Missing Authorization to Arbitrary Shortcode Execution
Slug
woocommerce-multilingual
Published
2024-03-28
Title
WooCommerce Multilingual & Multicurrency < 5.3.5 - Missing Authorization
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-04-16
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.4 - Shop Manager+ SQL Injection
Slug
woocommerce-multilingual
Published
2024-09-16
Title
WooCommerce Multilingual & Multicurrency < 5.3.7 - Missing Authorization
Slug
woocommerce-multilingual
Published
2024-10-07
Title
WooCommerce Multilingual & Multicurrency with WPML < 5.3.8 - Reflected Cross-Site Scripting
Slug
woocommerce-multilingual
Published
2025-04-09
Title
WooCommerce Multilingual & Multicurrency < 5.3.9 - Unauthenticated Tax Sync Settings Update
Slug
woocommerce-multilingual
Published
2026-07-31
Title
WPML Multilingual & Multicurrency for WooCommerce < 5.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
woocommerce-multiple-addresses
Published
2025-05-06
Title
Woocommerce Multiple Addresses <= 1.0.7.1 - Authenticated (Subscriber+) Privilege Escalation
Slug
woocommerce-multiple-customer-addresses
Published
2023-02-27
Title
WooCommerce Multiple Customer Addresses & Shipping < 21.7 - Arbitrary Address Creation/Deletion/Access/Update via IDOR
Slug
woocommerce-multiple-free-gift
Published
2024-09-13
Title
WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding
Slug
woocommerce-myparcel
Published
2024-12-12
Title
MyParcel < 4.24.2 - Reflected Cross-Site Scripting
Slug
woocommerce-myparcel
Published
2026-07-10
Title
MyParcel < 4.25.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Data Disclosure and Modification via wcmp_get_shipment_options and wcmp_save_shipment_options AJAX Actions
Slug
woocommerce-ninjaforms-product-addons
Published
2023-10-16
Title
WooCommerce Ninja Forms Product Add-ons < 1.7.1 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-notify-updated-product
Published
2025-09-05
Title
Woocommerce Notify Updated Product <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
woocommerce-novalnet-gateway
Published
2026-06-29
Title
Novalnet Payment Gateway for WooCommerce < 12.10.4 - Unauthenticated PHP Object Injection
Slug
woocommerce-openpos
Published
2024-07-09
Title
Woocommerce OpenPos < 7.0.1 - Unauthenticated SQL Injection
Slug
woocommerce-openpos
Published
2024-07-09
Title
Woocommerce OpenPos < 7.0.1 - Unauthenticated Arbitrary File Deletion
Slug
woocommerce-openpos
Published
2024-07-09
Title
Woocommerce OpenPos < 7.0.2 - Unauthenticated Sensitive Information Disclosure
Slug
woocommerce-order-address-print
Published
2023-05-30
Title
Woocommerce Order address Print <= 3.2 - Reflected XSS
Slug
woocommerce-order-barcodes
Published
2023-07-17
Title
WooCommerce Order Barcodes < 1.6.5 - Cross-Site Request Forgery
Slug
woocommerce-order-details
Published
2026-02-24
Title
WooCommerce Order Details <= 3.1 - Missing Authorization