WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-aliexpress-dropshipping
Published
2024-04-22
Title
Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy < 2.1.2 - Unauthenticated Arbitrary Content Deletion
Slug
woo-altcoin-payment-gateway
Published
2021-09-06
Title
Bitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting
Slug
woo-altcoin-payment-gateway
Published
2023-04-17
Title
Bitcoin / AltCoin Payment Gateway < 1.7.3 - Unauthenticated SQLi
Slug
woo-altcoin-payment-gateway
Published
2025-03-01
Title
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.6 - Unauthenticated SQL Injection
Slug
woo-altcoin-payment-gateway
Published
2025-03-20
Title
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.6 - Reflected Cross-Site Scripting
Slug
woo-audio-preview
Published
2022-04-11
Title
Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation
Slug
woo-authorize-net-gateway-aim
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-authorize-net-gateway-aim
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-auto-coupons
Published
2024-06-06
Title
Auto Coupons for WooCommerce < 3.0.15 - Reflected Cross-Site Scripting
Slug
woo-availability-date
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
woo-badge-designer-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
woo-better-customer-list
Published
2025-02-21
Title
Better Customer List for WooCommerce <= 1.2.3 - Reflected Cross-Site Scripting
Slug
woo-bigpost-shipping
Published
2025-09-29
Title
Big Post Shipping for WooCommerce < 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-billing-with-invoicexpress
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
woo-billingo-plus
Published
2022-09-14
Title
Multiple Plugins from Viszt Peter - Multiple CSRF
Slug
woo-binary-mlm
Published
2025-01-06
Title
Binary MLM Woocommerce < 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
woo-binary-mlm
Published
2025-01-06
Title
Binary MLM Woocommerce < 2.1 - Reflected Cross-Site Scripting via 'page'
Slug
woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers
Published
2023-07-26
Title
Fraud Prevention For Woocommerce < 2.1.6 - Settings Update via CSRF
Slug
woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers
Published
2026-01-22
Title
Fraud Prevention For Woocommerce < 2.3.3 - Authenticated (Subscriber+) Information Exposure
Slug
woo-book-price
Published
2026-01-15
Title
Woocommerce Book Price <= 1.3 - Authenticated (Subscriber++) Arbitrary File Download
Slug
woo-booking-bundle-hours
Published
2025-09-09
Title
WooCommerce Booking Bundle Hours < 0.7.5 - Cross-Site Request Forgery
Slug
woo-bookings-calendar
Published
2024-03-29
Title
WooCommerce Bookings Calendar <= 1.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-bought-together
Published
2024-04-17
Title
WPC Frequently Bought Together for WooCommerce < 7.0.4 - Missing Authorization