WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shipment-tracker-for-woocommerce
Published
2024-12-19
Title
Shipment Tracker for Woocommerce < 1.4.23.1 - Reflected Cross-Site Scripting
Slug
shipment-tracker-for-woocommerce
Published
2026-04-16
Title
Shipment Tracker for Woocommerce < 1.5.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
shipping-labels-for-woo
Published
2024-04-22
Title
WooCommerce Shipping Label < 2.3.9 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Slug
shipping-manager-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
shipping-manager-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
shipping-rate-by-cities
Published
2026-01-13
Title
Shipping Rate By Cities < 2.0.1 - Unauthenticated SQL Injection via 'city' Parameter
Slug
shipping-zones-by-drawing-for-woocommerce
Published
2026-10-30
Title
Shipping Zones by Drawing for WooCommerce < 3.3.1 - Unauthenticated Stored Cross-Site Scripting via 'szbd-picked' Checkout Parameter
Slug
shiprocket
Published
2026-01-29
Title
Shiprocket <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
shiptastic-for-woocommerce
Published
2026-07-22
Title
Shiptastic for WooCommerce < 5.1.1 - Unauthenticated Insecure Direct Object Reference
Slug
shiptime-discount-shipping
Published
2026-02-19
Title
ShipTime: Discounted Shipping Rates < 1.1.5 - Missing Authorization
Slug
shiptime-discount-shipping
Published
2026-07-23
Title
ShipTime: Discount Shipping < 1.1.5 - Authenticated (Subscriber+) Information Exposure
Slug
shiptimize-for-woocommerce
Published
2024-12-05
Title
Shiptimize for WooCommerce <= 3.1.86 - Reflected Cross-Site Scripting
Slug
shiptimize-for-woocommerce
Published
2025-04-01
Title
Shiptimize for WooCommerce <= 3.1.86 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
shipworks-e-commerce-bridge
Published
2025-01-17
Title
ShipWorks Connector for Woocommerce < 5.2.6 - Cross-Site Request Forgery to Service Password/Username Update
Slug
shipyaari-shipping-managment
Published
2024-10-18
Title
Shipyaari Shipping Management <= 1.2 - Unauthenticated PHP Object Injection
Slug
shmapper-by-teplitsa
Published
2024-12-23
Title
shMapper by Teplitsa < 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shmapper-by-teplitsa
Published
2025-01-24
Title
ShMapper by Teplitsa < 1.5.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
shockingly-big-ie6-warning
Published
2025-01-16
Title
Shockingly Big IE6 Warning <= 1.6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
shockingly-simple-favicon
Published
2023-09-29
Title
Shockingly Simple Favicon <= 1.8.2 - Settings Update via CSRF
Slug
shop-as-a-customer-for-woocommerce
Published
2023-07-31
Title
Shop as a Customer for WooCommerce < 1.2.4 - Shop Manager+ Privilege Escalation
Slug
shop-as-a-customer-for-woocommerce
Published
2023-07-31
Title
Shop as a Customer for WooCommerce < 1.1.8 - Subscriber+ Privilege Escalation
Slug
shop-assistant-for-woocommerce-jarvis
Published
2024-11-11
Title
Floating Buttons for WooCommerce < 2.9.2 - Missing Authorization
Slug
shop-page-wp
Published
2021-11-01
Title
Shop Page WP < 1.2.8 - Admin+ Stored Cross-Site Scripting
Slug
shopbuilder
Published
2024-05-09
Title
ShopBuilder – Elementor WooCommerce Builder Addons < 2.1.9 - Unauthenticated Sensitive Information Exposure
Slug
shopbuilder
Published
2024-07-05
Title
ShopBuilder – Elementor WooCommerce Builder Addons < 2.1.13 - Authenticated (Contributor+) Local File Inclusion