WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
webappick-pdf-invoice-for-woocommerce
Published
2025-05-07
Title
Challan < 3.7.59 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
webappick-pdf-invoice-for-woocommerce
Published
2026-10-05
Title
PDF Invoices & Packing Slips for WooCommerce – Challan <= 3.7.88 - Authenticated (Shop Manager+) Privilege Escalation
Slug
webappick-product-feed-for-woocommerce
Published
2019-08-30
Title
WooCommerce Product Feed for Google, Facebook, eBay and Many More < 3.1.15 - Authenticated Reflected XSS
Slug
webappick-product-feed-for-woocommerce
Published
2024-07-19
Title
CTX Feed < 6.5.7 - Shop Manager+ Arbitrary Options Update
Slug
webappick-product-feed-for-woocommerce
Published
2026-01-04
Title
CTX Feed < 6.6.19 - Missing Authorization
Slug
webappick-product-feed-for-woocommerce
Published
2026-02-18
Title
CTX Feed – WooCommerce Product Feed Manager < 6.6.12 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation
Slug
webappick-product-feed-for-woocommerce
Published
2026-04-07
Title
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels < 6.6.27 - Authenticated (Shop Manager+) PHP Object Injection
Slug
webappick-product-feed-for-woocommerce
Published
2026-08-04
Title
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels < 6.6.43 - Authenticated (Shop Manager+) Remote Code Execution
Slug
webappick-product-feed-for-woocommerce
Published
2026-08-14
Title
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels < 6.6.48 - Authenticated (Shop Manager+) Arbitrary File Downloaf
Slug
webappick-product-feed-for-woocommerce
Published
2026-09-21
Title
Product Feed Manager for WooCommerce < 6.6.44 - Authenticated (Shop Manager+) Path Traversal to File Deletion via 'provider' Parameter
Slug
webappick-product-feed-for-woocommerce-pro
Published
2026-10-01
Title
CTX Feed Pro <= 7.6.12 - Authenticated (Administrator+) Remote Code Execution
Slug
webba-booking-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
webba-booking-lite
Published
2022-04-15
Title
Webba Booking < 4.2.22 - Admin+ Stored Cross-Site Scripting
Slug
webba-booking-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
webba-booking-lite
Published
2023-12-26
Title
Webba Booking < 5.0 - Cross-Site Request Forgery
Slug
webba-booking-lite
Published
2024-09-23
Title
Appointment & Event Booking Calendar Plugin – Webba Booking < 5.0.50 - Missing Authorization to Authenticated (Subscriber+) CSS Settings Update
Slug
webba-booking-lite
Published
2025-07-16
Title
Webba Booking < 5.1.22 - Missing Authorization
Slug
webba-booking-lite
Published
2025-07-16
Title
Webba Booking < 5.1.21 - Cross-Site Request Forgery
Slug
webba-booking-lite
Published
2025-08-14
Title
Webba Booking < 6.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
webba-booking-lite
Published
2025-12-15
Title
Webba Booking < 6.2.2 - Missing Authorization
Slug
webba-booking-lite
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
webba-booking-lite
Published
2026-07-01
Title
Advanced Booking & Appointment System – Webba Booking Calendar < 6.4.14 - Missing Authorization
Slug
webba-booking-lite
Published
2026-09-24
Title
Appointment Booking Plugin & Scheduling System – Webba Booking Calendar < 6.5.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
webba-booking-lite
Published
2026-10-13
Title
Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar < 6.5.3 - Unauthenticated Insecure Direct Object Reference
Slug
webba-booking-lite
Published
2026-10-30
Title
Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar < 6.5.5 - Missing Authorization