WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-combo-offers
Published
2025-12-30
Title
Combo Offers WooCommerce < 4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-conditional-discount-rules-for-checkout
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-conditional-discount-rules-for-checkout
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-conditional-discount-rules-for-checkout
Published
2023-10-04
Title
WooCommerce Dynamic Pricing and Discount Rules < 2.4.1 - CSRF
Slug
woo-conditional-payment-gateways
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-conditional-payment-gateways
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-conditional-product-fees-for-checkout
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-conditional-product-fees-for-checkout
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-confirmation-email
Published
2019-05-22
Title
User Email Verification for WooCommerce < 3.4.0 - CSRF leading to Option Update
Slug
woo-confirmation-email
Published
2018-11-27
Title
Woo Confirmation Email < 3.2.0 - Missing Access Controls to View Uploaded files
Slug
woo-confirmation-email
Published
2023-06-02
Title
User Email Verification for WooCommerce <= 3.5.0 - Authentication bypass via weak token generation
Slug
woo-confirmation-email
Published
2023-07-26
Title
User Email Verification for WooCommerce <= 3.5.0 - Reflected XSS
Slug
woo-country-restrictions-advanced
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-country-restrictions-advanced
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-coupon-usage
Published
2021-08-24
Title
Coupon Affiliates for WooCommerce < 4.11.0.2 - Reflected Cross-Site Scripting
Slug
woo-coupon-usage
Published
2021-10-11
Title
Coupon Affiliates for WooCommerce < 4.11.3.4 - Arbitrary Referral Visits Deletion via CSRF
Slug
woo-coupon-usage
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-coupon-usage
Published
2022-03-02
Title
Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSS
Slug
woo-coupon-usage
Published
2023-06-26
Title
Coupon Affiliates < 5.4.4 - Unauthenticated Reflected XSS
Slug
woo-coupon-usage
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-coupon-usage
Published
2023-04-13
Title
Coupon Affiliates < 5.4.6 - Reflected XSS
Slug
woo-coupon-usage
Published
2024-03-16
Title
Coupon Affiliates < 5.12.8 - Reflected Cross-Site Scripting
Slug
woo-coupon-usage
Published
2024-12-12
Title
Coupon Affiliates – Affiliate Plugin for WooCommerce < 5.16.7.2 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting
Slug
woo-coupon-usage
Published
2025-04-17
Title
Coupon Affiliates – Affiliate Plugin for WooCommerce < 6.3.1 - Reflected Cross-Site Scripting via 'commission_summary' Parameter
Slug
woo-coupon-usage
Published
2025-07-16
Title
Coupon Affiliates < 6.4.1 - Cross-Site Request Forgery