WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-boost-sales
Published
2026-10-12
Title
Salevo Boost Sales for WooCommerce – Set up Up-Sells & Cross-Sells Popups & Auto Apply Coupon < 1.3.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
woo-bought-together
Published
2024-04-17
Title
WPC Frequently Bought Together for WooCommerce < 7.0.4 - Missing Authorization
Slug
woo-bought-together
Published
2024-08-16
Title
WPC Frequently Bought Together for WooCommerce < 7.2.0 - Missing Authorization
Slug
woo-bulk-edit-products
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-bulk-edit-products
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-bulk-edit-products
Published
2026-07-12
Title
Bulk Edit Products for WooCommerce – WP Sheet Editor < 1.8.22 - Missing Authorization
Slug
woo-bulk-editor
Published
2023-05-22
Title
BEAR < 1.1.3.2 - Cross-Site Request Forgery (CSRF)
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Slug
woo-bulk-editor
Published
2024-02-02
Title
BEAR < 1.1.4.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
Slug
woo-bulk-editor
Published
2024-02-02
Title
BEAR < 1.1.4.1 - Missing Authorization via Several Functions
Slug
woo-bulk-editor
Published
2024-03-28
Title
BEAR < 1.1.4.4 - Missing Authorization
Slug
woo-bulk-editor
Published
2024-04-10
Title
BEAR <= 1.1.4.1 & WOLF <= 1.0.8.1 - Cross-Site Request Forgery to Notice Dismissal
Slug
woo-bulk-editor
Published
2024-03-26
Title
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net < 1.1.4.3 - Reflected Cross-Site Scripting
Slug
woo-bulk-editor
Published
2025-02-14
Title
BEAR < 1.1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
woo-bulk-editor
Published
2026-04-07
Title
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net < 1.1.6 - Cross-Site Request Forgery to Taxonomy Term Deletion