WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
product-expiry-for-woocommerce
Published
2024-01-02
Title
Product Expiry for WooCommerce < 2.6 - Subscriber+ Settings Update
Slug
product-filter-for-woocommerce-product
Published
2022-04-13
Title
Product Filter For WooCommerce Product <= 1.3.0 - Unauthenticated SQLi
Slug
product-filter-widget-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-filter-widget-for-elementor
Published
2026-06-01
Title
Product Filter Widget for Elementor <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
Slug
product-filter-widget-for-elementor
Published
2026-06-08
Title
Product Filter Widget for Elementor <= 1.0.6 - Reflected Cross-Site Scripting via 'args[filterFormArray]' Parameter
Slug
product-gtin-ean-upc-isbn-for-woocommerce
Published
2023-02-13
Title
Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSS
Slug
product-icon-badge
Published
2026-05-26
Title
NS Product icon badge <= 1.2.4 - Reflected Cross-Site Scripting via PHP_SELF
Slug
product-image-watermark-for-woo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
product-import-export-for-woo
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
product-import-export-for-woo
Published
2024-01-16
Title
Product Import Export for WooCommerce < 2.3.8 - Shop Manager+ Arbitrary File Upload via upload_import_file
Slug
product-import-export-for-woo
Published
2024-03-26
Title
Product Import Export for WooCommerce < 2.4.2 - Authenticated(Shop Manager+) Arbitrary File Upload
Slug
product-import-export-for-woo
Published
2025-03-25
Title
Product Import Export for WooCommerce < 2.5.1 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Slug
product-import-export-for-woo
Published
2025-03-25
Title
Product Import Export for WooCommerce < 2.5.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Slug
product-import-export-for-woo
Published
2025-03-25
Title
Product Import Export for WooCommerce < 2.5.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Slug
product-import-export-for-woo
Published
2025-03-25
Title
Product Import Export for WooCommerce < 2.5.1 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Slug
product-import-export-for-woo
Published
2026-05-27
Title
Product Import Export for WooCommerce – Import Export Product CSV Suite < 2.5.7 - Missing Authorization
Slug
product-input-fields-for-woocommerce
Published
2020-08-03
Title
Product Input Fields for WooCommerce < 1.2.7 - Unauthenticated File Download
Slug
product-input-fields-for-woocommerce
Published
2024-04-10
Title
Product Input Fields for WooCommerce < 1.8.0 - Cross-Site Request Forgery to Notice Dismissal
Slug
product-input-fields-for-woocommerce
Published
2024-11-25
Title
Product Input Fields for WooCommerce < 2.0 - Contributor+ Arbitrary File Read
Slug
product-input-fields-for-woocommerce
Published
2025-03-07
Title
Product Input Fields for WooCommerce < 1.12.1 - Unauthenticated Limited File Upload
Slug
product-layouts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-layouts
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
product-lister-ebay
Published
2025-04-21
Title
Product Lister for eBay <= 2.0.9 - Unauthenticated Local File Inclusion
Slug
product-lister-walmart
Published
2020-03-25
Title
Product Lister for Walmart <= 1.0.0 - Unauthenticated RCE via Outdated PHPUnit
Slug
product-loops
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import