WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-permalink-manager
Published
2024-03-13
Title
Premmerce Permalink Manager for WooCommerce < 2.3.11 - Unauthenticated Local File Inclusion
Slug
woo-point-of-sale
Published
2024-12-24
Title
WooCommerce Point of Sale < 6.2.0 - Insecure Direct Object Reference to Privilege Escalation via Arbitrary User Email Change
Slug
woo-point-of-salepos
Published
2025-07-24
Title
WooCommerce Point Of Sale (POS) <= 1.4 - Authenticated (Subscriber+) SQL Injection
Slug
woo-preview-emails
Published
2021-11-17
Title
Preview E-mails for WooCommerce < 2.0.0 - Reflected Cross-Site Scripting
Slug
woo-preview-emails
Published
2024-03-26
Title
Preview E-mails for WooCommerce < 2.2.2 - Reflected Cross-Site Scripting
Slug
woo-pricing-table
Published
2025-02-11
Title
WooCommerce Pricing – Product Pricing < 1.1.0 - Unauthenticated Stored Cross-Site Scripting
Slug
woo-product-attachment
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-product-attachment
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-product-attachment
Published
2023-08-11
Title
WooCommerce Product Attachment < 2.2.0 - Checkout Attachements Update via CSRF
Slug
woo-product-bundle
Published
2023-12-28
Title
WPC Product Bundles for WooCommerce < 7.3.2 - Cross-Site Request Forgery
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2024-03-05
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.9.8 - Authenticated(Contributor+) PHP Object Injection
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2024-09-16
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.10.0 - Contributor+ Local File Inclusion
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2024-12-11
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.10.0 - Authenticated (Contributor+) Local File Inclusion via 'theme'
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2025-01-24
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.10.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
woo-product-category-discount
Published
2024-01-24
Title
Category Discount Woocommerce < 4.13 - Missing Authorization via wpcd_save_discount()
Slug
woo-product-design
Published
2024-10-25
Title
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
woo-product-design
Published
2024-10-29
Title
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Download
Slug
woo-product-design
Published
2024-10-28
Title
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Deletion
Slug
woo-product-enquiry
Published
2023-11-08
Title
WooCommerce Product Enquiry <= 2.3.4 - Unauthenticated Stored XSS
Slug
woo-product-feed-pro
Published
2021-12-23
Title
Product Feed PRO for WooCommerce < 11.0.7 - Subscriber+ Settings Update to Stored XSS
Slug
woo-product-feed-pro
Published
2022-02-01
Title
Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting
Slug
woo-product-feed-pro
Published
2023-03-22
Title
Product Feed PRO for WooCommerce < 12.4.5 - Multiple CSRF
Slug
woo-product-feed-pro
Published
2024-03-26
Title
Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More < 13.2.6 - Reflected Cross-Site Scripting
Slug
woo-product-feed-pro
Published
2024-04-15
Title
Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More < 13.3.2 - Sensitive Information Exposure via Log Files
Slug
woo-product-filter
Published
2023-12-26
Title
Product Filter by WBW < 2.5.1 - Subscriber+ Table Data Access