WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
product-layouts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-layouts
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
product-lister-ebay
Published
2025-04-21
Title
Product Lister for eBay <= 2.0.9 - Unauthenticated Local File Inclusion
Slug
product-lister-walmart
Published
2020-03-25
Title
Product Lister for Walmart <= 1.0.0 - Unauthenticated RCE via Outdated PHPUnit
Slug
product-loops
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
product-loops
Published
2025-12-23
Title
Product Loops for WooCommerce <= 2.1.2 - Missing Authorization
Slug
product-notes-for-woocommerce
Published
2025-05-19
Title
Product Notes Tab & Private Admin Notes for WooCommerce < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
product-notices-for-woocommerce
Published
2025-04-01
Title
Product Notices for WooCommerce <= 1.3.3 - Cross-Site Request Forgery
Slug
product-page-shipping-calculator-for-woocommerce
Published
2023-04-03
Title
Product page shipping calculator for WooCommerce < 1.3.21 - Admin+ Stored XSS
Slug
product-page-shipping-calculator-for-woocommerce
Published
2023-08-25
Title
Product page shipping calculator for WooCommerce < 1.3.26 - Admin+ Stored XSS
Slug
product-price-by-formula-for-woocommerce
Published
2026-02-18
Title
Product Price by Formula for WooCommerce <= 2.5.6 - Missing Authorization
Slug
product-price-history
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-puller
Published
2025-03-18
Title
Product Puller <= 1.5.1 - Reflected Cross-Site Scripting
Slug
product-quantity-dropdown-for-woocommerce
Published
2025-05-07
Title
Product Quantity Dropdown For Woocommerce < 1.3 - Cross-Site Request Forgery
Slug
product-quantity-for-woocommerce
Published
2025-06-06
Title
Min Max Step Quantity Limits Manager for WooCommerce < 5.1.1 - Cross-Site Request Forgery
Slug
product-quantity-for-woocommerce
Published
2026-04-21
Title
Min Max Step Quantity Limits Manager for WooCommerce < 5.2.3 - Reflected Cross-Site Scripting
Slug
product-recommendation-quiz-for-ecommerce
Published
2023-10-25
Title
Product Recommendation Quiz for eCommerce < 2.1.2 - Missing Authorization in prq_set_token
Slug
product-reviews-import-export-for-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
product-shipping-countdown-free-version
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
product-shipping-countdown-free-version
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-size-chart-for-woo
Published
2023-11-28
Title
Product Size Chart For WooCommerce < 1.1.6 - Settings Update via CSRF
Slug
product-slider-for-woocommerce-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
product-slider-for-woocommerce-lite
Published
2023-04-17
Title
Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS
Slug
product-specifications
Published
2023-03-28
Title
Product Specifications for Woocommerce < 0.7.0 - Reflected Cross-Site Scripting
Slug
product-specifications
Published
2026-06-26
Title
Product Specifications for Woocommerce < 0.8.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attribute/Group Creation, Modification, and Deletion via 'dwps_modify_groups' and 'dwps_modify_attributes' AJAX Actions