WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shopbuilder
Published
2025-12-12
Title
Shopbuilder < 3.2.2 - Reflected XSS
Slug
shopbuilder
Published
2026-02-18
Title
ShopBuilder – Elementor WooCommerce Builder Addons < 3.2.5 - Unauthenticated Information Exposure
Slug
shopbuilder
Published
2026-10-03
Title
ShopBuilder – WooCommerce Builder For Elementor < 3.4.2 - Unauthenticated Stored Cross-Site Scripting
Slug
shopbuilder
Published
2026-10-29
Title
ShopBuilder – WooCommerce Builder For Elementor < 3.4.3 - Missing Authorization
Slug
shopbuilder-pro
Published
2026-08-24
Title
ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 - Unauthenticated Arbitrary File Deletion
Slug
shopconstruct
Published
2023-09-01
Title
ShopConstruct <= 1.1.2 - Admin+ Stored XSS
Slug
shopcred
Published
2025-04-01
Title
ShopCred <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shopelement
Published
2024-12-30
Title
ShopElement < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shopello
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
shopengine
Published
2023-04-19
Title
ShopEngine < 4.1.2 - CSRF
Slug
shopengine
Published
2025-09-25
Title
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution < 4.8.4 - Insufficient Authorization to Authenticated (Editor+) Settings Update
Slug
shopengine
Published
2025-10-24
Title
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution < 4.8.5 - Incorrect Authorization to Authenticated (Editor+) License Status Update
Slug
shopengine
Published
2025-12-02
Title
ShopEngine < 4.8.6 - Cross-Site Request Forgery to Wishlist Manipulation
Slug
shopengine
Published
2026-08-11
Title
ShopEngine < 4.9.3 - Customer PII Disclosure via Forced Authentication
Slug
shopengine
Published
2026-08-24
Title
ShopEngine < 4.9.5 - Shop Manager+ Privilege Escalation via WXR Import
Slug
shopengine
Published
2026-09-14
Title
The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets < 4.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shopengine_product_title_header_size' Parameter
Slug
shopify-plugin
Published
2026-07-02
Title
Shopify <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Slug
shopkeeper-extender
Published
2024-04-11
Title
Shopkeeper Extender < 3.7 - Contributor+ Stored XSS
Slug
shopkeeper-extender
Published
2025-11-13
Title
Shopkeeper Extender < 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shopmagic-for-woocommerce
Published
2025-10-15
Title
ShopMagic < 4.5.7 - Unauthenticated Information Exposure
Slug
shopmagic-for-woocommerce
Published
2026-01-07
Title
ShopMagic < 4.7.3 - Missing Authorization
Slug
shopmagic-for-woocommerce
Published
2026-10-13
Title
ShopMagic < 4.9.1 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter
Slug
shopmagic-for-woocommerce
Published
2026-10-22
Title
ShopMagic – email automation for WordPress < 4.9.2 - Unauthenticated Information Exposure
Slug
shopmonitorio
Published
2026-07-16
Title
ShopMonitor.io < 1.2.0 - Unauthenticated Administrator Account Takeover via Password-Reset Email Reroute
Slug
shopp
Published
2021-08-17
Title
Shopp eCommerce <= 1.4 - Unauthenticated Arbitrary File Upload