WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-admin-product-notes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-advance-search
Published
2018-06-04
Title
Advance Search for WooCommerce < 1.1 - Multiple XSS
Slug
woo-advance-search
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-advance-search
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-advanced-extra-fees-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-advanced-product-information
Published
2025-01-07
Title
Advanced Product Information for WooCommerce < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-advanced-product-size-chart
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-advanced-product-size-chart
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-advanced-product-size-chart
Published
2025-01-24
Title
Product Size Charts Plugin for WooCommerce < 2.4.6 - Missing Authorization
Slug
woo-advanced-shipment-tracking
Published
2021-07-26
Title
Advanced Shipment Tracking for WooCommerce < 3.2.7 - Authenticated Options Change
Slug
woo-advanced-shipment-tracking
Published
2023-03-28
Title
Advanced Shipment Tracking for WooCommerce <= 3.5.2 - CSRF
Slug
woo-aliexpress-dropshipping
Published
2023-12-06
Title
Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy < 2.1.2 - Missing Authorization
Slug
woo-aliexpress-dropshipping
Published
2024-04-22
Title
Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy < 2.1.2 - Unauthenticated Arbitrary Content Deletion
Slug
woo-altcoin-payment-gateway
Published
2021-09-06
Title
Bitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting
Slug
woo-altcoin-payment-gateway
Published
2023-04-17
Title
Bitcoin / AltCoin Payment Gateway < 1.7.3 - Unauthenticated SQLi
Slug
woo-altcoin-payment-gateway
Published
2025-03-01
Title
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.6 - Unauthenticated SQL Injection
Slug
woo-altcoin-payment-gateway
Published
2025-03-20
Title
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.6 - Reflected Cross-Site Scripting
Slug
woo-audio-preview
Published
2022-04-11
Title
Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation
Slug
woo-authorize-net-gateway-aim
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-authorize-net-gateway-aim
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-auto-coupons
Published
2024-06-06
Title
Auto Coupons for WooCommerce < 3.0.15 - Reflected Cross-Site Scripting
Slug
woo-availability-date
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
woo-badge-designer-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
woo-better-customer-list
Published
2025-02-21
Title
Better Customer List for WooCommerce <= 1.2.3 - Reflected Cross-Site Scripting
Slug
woo-bigpost-shipping
Published
2025-09-29
Title
Big Post Shipping for WooCommerce < 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting