WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-remove-cart-and-query-button
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-remove-cart-and-query-button
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-reviews-by-wiremo
Published
2025-12-31
Title
Wiremo <= 1.4.99 - Missing Authorization
Slug
woo-rfq-for-woocommerce
Published
2025-03-19
Title
NP Quote Request for WooCommerce < 1.9.180 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure
Slug
woo-salesforce-plugin-crm-perks
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
woo-salesforce-plugin-crm-perks
Published
2025-05-07
Title
Integration for WooCommerce and Salesforce < 1.7.6 - Open Redirect
Slug
woo-save-abandoned-carts
Published
2024-09-30
Title
CartBounty – Save and recover abandoned carts for WooCommerce < 8.2.1 - Cross-Site Request Forgery
Slug
woo-seo-addon
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-seo-addon
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-seo-content-randomizer-addon
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-shipping-display-mode
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-shipping-display-mode
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-shipping-dpd-baltic
Published
2022-11-16
Title
WooCommerce Shipping - DPD baltic < 1.2.11 - Admin+ Stored XSS
Slug
woo-shipping-dpd-baltic
Published
2022-11-21
Title
WooCommerce Shipping - DPD baltic < 1.2.57 - Subscriber+ Arbitrary Options Deletion
Slug
woo-shipping-dpd-baltic
Published
2024-10-17
Title
DPD Baltic Shipping < 1.2.84 - Reflected Cross-Site Scripting
Slug
woo-show-single-variations-shop-category
Published
2025-11-28
Title
Show Variations as Single Products Woocommerce < 3.0 - Missing Authorization
Slug
woo-simple-frontend-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-simple-frontend-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-single-page-checkout
Published
2025-09-05
Title
WooCommerce Single Page Checkout <= 1.2.7 - Cross-Site Request Forgery
Slug
woo-slider-pro-drag-drop-slider-builder-for-woocommerce
Published
2025-05-29
Title
Woo Slider Pro - Drag Drop Slider Builder For WooCommerce <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
woo-slider-pro-drag-drop-slider-builder-for-woocommerce
Published
2025-05-30
Title
Woo Slider Pro <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
woo-smart-compare
Published
2025-07-10
Title
WPC Smart Compare for WooCommerce < 6.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-smart-compare
Published
2025-08-18
Title
WPC Smart Compare for WooCommerce < 6.4.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
woo-smart-quick-view
Published
2024-04-12
Title
WPC Smart Quick View for WooCommerce < 4.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
woo-smart-quick-view
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library