WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
product-delivery-date
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-delivery-date-for-woocommerce-lite
Published
2024-01-03
Title
Product Delivery Date for WooCommerce – Lite < 2.7.1 - Missing Authorization
Slug
product-delivery-date-for-woocommerce-lite
Published
2024-07-11
Title
Product Delivery Date for WooCommerce – Lite < 2.7.3 - Missing Authorization
Slug
product-delivery-date-for-woocommerce-lite
Published
2024-10-03
Title
Product Delivery Date for WooCommerce – Lite < 2.7.4 - Reflected Cross-Site Scripting
Slug
product-delivery-date-for-woocommerce-lite
Published
2024-11-12
Title
Product Delivery Date for WooCommerce - Lite < 2.8.1 - Reflected Cross-Site Scripting
Slug
product-delivery-date-for-woocommerce-lite
Published
2025-12-29
Title
Product Delivery Date for WooCommerce – Lite < 3.3.0 - Missing Authorization
Slug
product-delivery-date-for-woocommerce-lite
Published
2026-10-14
Title
Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions
Slug
product-designer
Published
2024-04-05
Title
Product Designer < 1.0.33 - Unauthenticated PHP Object Injection
Slug
product-designer
Published
2024-07-08
Title
Product Designer < 1.0.34 - Unauthenticated Arbitrary Attachment Deletion
Slug
product-designer
Published
2024-11-20
Title
Product Designer < 1.0.37 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
product-designer
Published
2026-10-15
Title
Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection
Slug
product-designer-app
Published
2026-09-29
Title
Product Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design
Slug
product-enquiry-for-woocommerce
Published
2024-06-22
Title
Product Enquiry for WooCommerce < 3.1.8 - Admin+ Stored XSS
Slug
product-expiry-for-woocommerce
Published
2024-01-02
Title
Product Expiry for WooCommerce < 2.6 - Subscriber+ Settings Update
Slug
product-filter-for-woocommerce-product
Published
2022-04-13
Title
Product Filter For WooCommerce Product <= 1.3.0 - Unauthenticated SQLi
Slug
product-filter-widget-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
product-filter-widget-for-elementor
Published
2026-06-01
Title
Product Filter Widget for Elementor <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
Slug
product-filter-widget-for-elementor
Published
2026-06-08
Title
Product Filter Widget for Elementor <= 1.0.6 - Reflected Cross-Site Scripting via 'args[filterFormArray]' Parameter
Slug
product-gtin-ean-upc-isbn-for-woocommerce
Published
2023-02-13
Title
Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSS
Slug
product-icon-badge
Published
2026-05-26
Title
NS Product icon badge <= 1.2.4 - Reflected Cross-Site Scripting via PHP_SELF
Slug
product-image-watermark-for-woo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
product-import-export-for-woo
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
product-import-export-for-woo
Published
2024-01-16
Title
Product Import Export for WooCommerce < 2.3.8 - Shop Manager+ Arbitrary File Upload via upload_import_file
Slug
product-import-export-for-woo
Published
2024-03-26
Title
Product Import Export for WooCommerce < 2.4.2 - Authenticated(Shop Manager+) Arbitrary File Upload
Slug
product-import-export-for-woo
Published
2025-03-25
Title
Product Import Export for WooCommerce < 2.5.1 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function