WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-3d-viewer
Published
2025-07-02
Title
prettyPhoto JavaScript Library <= 3.1.6 - Contributor+ Stored XSS
Slug
woo-abandoned-cart-recovery
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
woo-abandoned-cart-recovery
Published
2021-07-05
Title
Abandoned Cart Recovery for WooCommerce < 1.0.4.1 - Cross-Site Request Forgery
Slug
woo-add-to-cart-text-change
Published
2023-11-28
Title
Add to Cart Text Changer and Customize Button, Add Custom Icon < 2.1 - Add to cart Text Update via CSRF
Slug
woo-add-to-quote
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-add-to-quote
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-additional-fees-on-checkout-wordpress
Published
2024-12-16
Title
WooCommerce Additional Fees On Checkout (Free) < 1.4.8 - Reflected Cross-Site Scripting via 'number'
Slug
woo-additional-fees-on-checkout-wordpress
Published
2025-09-22
Title
WooCommerce Additional Fees On Checkout (Free) < 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
woo-addon-uploads
Published
2025-02-17
Title
File Uploads Addon for WooCommerce < 1.7.2 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
woo-addon-uploads
Published
2026-01-10
Title
File Uploads Addon for WooCommerce <= 1.7.3 - Missing Authorization
Slug
woo-address-book
Published
2019-08-23
Title
WooCommerce Address Book < 1.6.0 - CSRF
Slug
woo-admin-product-notes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-admin-product-notes
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
woo-admin-product-notes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-advance-search
Published
2018-06-04
Title
Advance Search for WooCommerce < 1.1 - Multiple XSS
Slug
woo-advance-search
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-advance-search
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-advanced-extra-fees-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-advanced-product-information
Published
2025-01-07
Title
Advanced Product Information for WooCommerce < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-advanced-product-size-chart
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-advanced-product-size-chart
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-advanced-product-size-chart
Published
2025-01-24
Title
Product Size Charts Plugin for WooCommerce < 2.4.6 - Missing Authorization
Slug
woo-advanced-shipment-tracking
Published
2021-07-26
Title
Advanced Shipment Tracking for WooCommerce < 3.2.7 - Authenticated Options Change
Slug
woo-advanced-shipment-tracking
Published
2023-03-28
Title
Advanced Shipment Tracking for WooCommerce <= 3.5.2 - CSRF
Slug
woo-aliexpress-dropshipping
Published
2023-12-06
Title
Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy < 2.1.2 - Missing Authorization