WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-warranties-and-returns
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
woocommerce-warranty
Published
2023-05-22
Title
WooCommerce Warranty Requests < 2.1.7 - Reflected XSS
Slug
woocommerce-warranty
Published
2023-12-27
Title
WooCommerce Warranty Requests < 2.3.0 - Missing Authorization
Slug
woocommerce-warranty
Published
2023-12-27
Title
WooCommerce Warranty Requests < 2.3.0 - Missing Authorization
Slug
woocommerce-wholesale-lead-capture
Published
2026-02-20
Title
Woocommerce Wholesale Lead Capture < 2.0.3.2 - Unauthenticated Privilege Escalation
Slug
woocommerce-wholesale-lead-capture
Published
2026-02-20
Title
Woocommerce Wholesale Lead Capture < 2.0.3.2 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-wholesale-prices
Published
2022-11-28
Title
Wholesale Suite < 2.1.5.1 - Subscriber+ Stored Cross-Site Scripting
Slug
woocommerce-wholesale-prices
Published
2023-02-27
Title
Wholesale Suite < 2.1.5.1 - Subscriber+ Missing Authorization for Plugin Settings Change
Slug
woocommerce-wholesale-prices
Published
2023-05-09
Title
Wholesale Suite < 2.1.5.1 - Cross-Site Request Forgery
Slug
woocommerce-wholesale-prices
Published
2024-07-11
Title
Wholesale Suite < 2.2.0 - Missing Authorization
Slug
woocommerce-wholesale-prices
Published
2025-07-23
Title
Wholesale Suite < 2.2.5 - Authenticated (Shop Manager+) Privilege Escalation
Slug
woocommerce-wholesale-prices
Published
2026-02-20
Title
Wholesale Suite < 2.2.7 - Authenticated (Shop Manager) Privilege Escalation
Slug
woocommerce-wholesale-pricing
Published
2024-03-28
Title
Wholesale For WooCommerce < 2.3.1 - Unauthenticated Information Exposure
Slug
woocommerce-wholesale-pricing
Published
2024-04-05
Title
Wholesale For WooCommerce < 2.3.1 - Unauthenticated Arbitrary Post Deletion
Slug
woocommerce-woocart-popup-lite
Published
2024-03-29
Title
Popup Cart Lite for WooCommerce <= 1.1 - Cross-Site Request Forgery
Slug
woocustomizer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocustomizer
Published
2026-03-16
Title
StoreCustomizer – A plugin to Customize all WooCommerce Pages < 2.6.5 - Missing Authorization
Slug
woocustomizer
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
woodiscuz-woocommerce-comments
Published
2023-05-19
Title
WooDiscuz – WooCommerce Comments < 2.3.0 - Admin+ Stored XSS
Slug
woodiscuz-woocommerce-comments
Published
2023-12-04
Title
WooDiscuz – WooCommerce Comments <= 2.3.0 - Cross-Site Request Forgery
Slug
woodly-core
Published
2026-01-28
Title
Woodly Core <= 1.4 - Unauthenticated SQL Injection
Slug
woodpecker
Published
2026-01-08
Title
Woodpecker for WordPress <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_name' Shortcode Attribute
Slug
wooemailreport
Published
2023-04-21
Title
Woocommerce Email Report <= 2.4 - Reflected XSS
Slug
wooenvato
Published
2025-09-11
Title
Woocommerce Envato Affiliates <= 1.2.1 - Reflected Cross-Site Scripting
Slug
wooenvato
Published
2026-05-26
Title
Woocommerce Envato Affiliates <= 1.2.1 - Missing Authorization