WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-bulk-editor
Published
2026-04-07
Title
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net < 1.1.6 - Cross-Site Request Forgery to Product Data Modification
Slug
woo-bulk-editor
Published
2026-05-07
Title
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net < 1.1.6 - Cross-Site Request Forgery
Slug
woo-bulk-editor
Published
2026-06-29
Title
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net < 1.1.9 - Unauthenticated Stored Cross-Site Scripting
Slug
woo-bulk-editor
Published
2026-03-30
Title
BEAR < 1.1.8 - Authenticated (Shop manager+) SQL Injection
Slug
woo-bulk-editor
Published
2026-10-04
Title
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.3 - Missing Authorization
Slug
woo-bulk-editor
Published
2026-09-10
Title
BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Taxonomy Term Modification via CSRF
Slug
woo-bulk-editor
Published
2026-09-10
Title
BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRF
Slug
woo-bulk-editor
Published
2026-09-10
Title
BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Authenticated Product Download URL and Meta Disclosure via IDOR
Slug
woo-bulk-price-update
Published
2023-03-22
Title
Woo Bulk Price Update < 2.2.2 - Reflected XSS
Slug
woo-cardcom-payment-gateway
Published
2025-09-22
Title
CardCom Payment Gateway < 3.5.1.1 - Missing Authorization
Slug
woo-cart-abandonment-recovery
Published
2024-03-13
Title
WooCommerce Cart Abandonment Recovery < 1.2.27 - Templates/Abandoned Orders Deletion via CSRF
Slug
woo-cart-abandonment-recovery
Published
2026-04-08
Title
Cart Abandonment Recovery for WooCommerce < 2.1.0 - Shop Manager+ Privilege Escalation
Slug
woo-cart-abandonment-recovery
Published
2026-10-12
Title
Cart Abandonment Recovery for WooCommerce < 2.1.4 - Unauthenticated Abandoned Cart Record Deletion and Modification via IDOR
Slug
woo-cart-abandonment-recovery
Published
2026-10-19
Title
Cart Abandonment Recovery for WooCommerce < 2.2.0 - Unauthenticated Authentication Bypass via Unsigned Recovery Token
Slug
woo-cart-all-in-one
Published
2026-02-17
Title
Cart All In One For WooCommerce < 1.1.22 - Admin+ Code Injection
Slug
woo-cart-count-shortcode
Published
2024-12-13
Title
WooCommerce Cart Count Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-cart-count-shortcode
Published
2025-02-05
Title
WooCommerce Cart Count Shortcode < 1.1.0 - Contributor+ XSS
Slug
woo-cart-weight
Published
2025-11-30
Title
Cart Weight for WooCommerce < 1.9.12 - Missing Authorization
Slug
woo-category-slider-by-pluginever
Published
2025-05-02
Title
Product Category Slider for WooCommerce < 4.3.5 - Authenticated (Contributor+) Local File Inclusion
Slug
woo-category-slider-grid
Published
2023-08-24
Title
Category Slider for WooCommerce < 1.4.16 - Missing Authorization via notice dismissal functionality
Slug
woo-checkout-field-editor-pro
Published
2022-11-07
Title
Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection
Slug
woo-checkout-field-editor-pro
Published
2024-10-03
Title
Checkout Field Editor (Checkout Manager) for WooCommerce < 2.0.4 - Reflected Cross-Site Scripting via render_review_request_notice
Slug
woo-checkout-field-editor-pro
Published
2026-03-10
Title
Checkout Field Editor (Checkout Manager) for WooCommerce < 2.1.8 - Unauthenticated Stored XSS via Block Checkout Custom Radio Field
Slug
woo-checkout-for-digital-goods
Published
2018-05-28
Title
WooCommerce Checkout For Digital Goods <= 2.1 - CSRF to Settings Change
Slug
woo-checkout-for-digital-goods
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius