WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
product-reviews-import-export-for-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
product-shipping-countdown-free-version
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
product-shipping-countdown-free-version
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-size-chart-for-woo
Published
2023-11-28
Title
Product Size Chart For WooCommerce < 1.1.6 - Settings Update via CSRF
Slug
product-slider-for-woocommerce-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
product-slider-for-woocommerce-lite
Published
2023-04-17
Title
Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS
Slug
product-specifications
Published
2023-03-28
Title
Product Specifications for Woocommerce < 0.7.0 - Reflected Cross-Site Scripting
Slug
product-subtitle-for-woocommerce
Published
2025-05-30
Title
Product Subtitle for WooCommerce < 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via htmlTag Parameter
Slug
product-sync-master-sheet
Published
2026-02-04
Title
Sync Master Sheet – Product Sync with Google Sheet for WooCommerce < 1.1.4 - Missing Authorization
Slug
product-table
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
product-table
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-table-for-woocommerce
Published
2025-02-03
Title
Product Table For WooCommerce < 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
product-table-for-woocommerce
Published
2025-10-16
Title
Product Table For WooCommerce < 1.2.5 - Authenticated (Contributor+) PHP Object Injection
Slug
product-tabs-for-woocommerce
Published
2025-04-11
Title
Additional Custom Product Tabs for WooCommerce < 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
product-tabs-for-woocommerce
Published
2025-09-09
Title
Additional Custom Product Tabs for WooCommerce < 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
product-visibility-by-country-for-woocommerce
Published
2023-11-07
Title
Product Visibility by Country for WooCommerce <= 1.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
product-websites-showcase
Published
2024-10-17
Title
Product Website Showcase <= 1.0 - Unauthenticated Arbitrary File Upload
Slug
product-xml-feeds-for-woocommerce
Published
2025-07-11
Title
Product XML Feed Manager for WooCommerce < 2.9.3 - Missing Authorization
Slug
product-xml-feeds-for-woocommerce
Published
2025-07-31
Title
Product XML Feed Manager for WooCommerce < 2.9.4 - Authenticated (Contributor+) Remote Code Execution
Slug
productdyno
Published
2025-01-03
Title
ProductDyno < 1.0.25 - Reflected Cross-Site Scripting
Slug
productdyno
Published
2025-03-10
Title
ProductDyno < 1.0.25 - Reflected Cross-Site Scripting via 'res' Parameter
Slug
productive-commerce
Published
2025-05-07
Title
Productive Commerce <= 1.1.38 - Unauthenticated SQL Injection
Slug
productive-style
Published
2025-09-16
Title
Productive Style < 1.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via display_productive_breadcrumb Shortcode
Slug
products-file-upload-for-woocommerce
Published
2026-03-23
Title
Product File Upload for WooCommerce < 2.2.5 - Unauthenticated Arbitrary File Deletion
Slug
products-rearrange-woocommerce
Published
2026-03-20
Title
Product Rearrange for WooCommerce <= 1.2.2 - Unauthenticated SQL Injection