WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-thank-you-page-customizer
Published
2025-12-05
Title
Thank You Page Customizer for WooCommerce < 1.1.9 - Missing Authorization
Slug
woo-thank-you-page-nextmove-lite
Published
2024-02-09
Title
NextMove Lite < 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation
Slug
woo-thank-you-page-nextmove-lite
Published
2024-02-29
Title
NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure
Slug
woo-thank-you-page-nextmove-lite
Published
2024-04-11
Title
NextMove Lite < 2.18.2 - Cross-Site Request Forgery
Slug
woo-thank-you-page-nextmove-lite
Published
2025-02-27
Title
NextMove Lite – Thank You Page for WooCommerce < 2.20.0 - Missing Authorization to Authenticated (Subscriber+) Deactivation Reason Submission
Slug
woo-thank-you-page-nextmove-lite
Published
2025-10-18
Title
NextMove Lite <= 2.21.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-thank-you-page-nextmove-lite
Published
2025-07-28
Title
NextMove Lite <= 2.21.0 - Reflected Cross-Site Scripting
Slug
woo-tipdonation
Published
2023-04-24
Title
Woocommerce Tip/Donation <= 1.2 - Shop Manager+ Stored XSS
Slug
woo-tools
Published
2024-06-06
Title
WooCommerce Tools < 1.2.10 - Missing Authorization to Authenticated (Subscriber+) Plugin Module Deactivation
Slug
woo-total-sales
Published
2024-04-29
Title
Woo Total Sales <= 3.1.4 - Missing Authorization to Unauthenticated Sales Report Retrieval
Slug
woo-tranzila-gateway
Published
2024-01-05
Title
WooCommerce Tranzila Gateway <= 1.0.8 - Unauthenticated PHP Object Injection
Slug
woo-tumblog
Published
2025-04-02
Title
WooTumblog <= 2.1.4 - Missing Authorization to Unauthenticated Content Injection
Slug
woo-tuner
Published
2025-01-16
Title
Woo Tuner <= 0.1.2 - Missing Authorization
Slug
woo-ukrposhta
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-ukrposhta
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-ukrposhta
Published
2025-01-06
Title
Woo Ukrposhta < 1.18.0 - Reflected Cross-Site Scripting via order, post, and idd Parameters
Slug
woo-update-variations-in-cart
Published
2025-01-16
Title
Woo Update Variations In Cart <= 0.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
woo-ups-pickup
Published
2025-01-10
Title
Woo UPS Pickup < 2.6.6 - Reflected XSS
Slug
woo-ups-pickup
Published
2025-01-16
Title
OPSI Israel Domestic Shipments <= 2.8.0 - Missing Authorization
Slug
woo-variation-gallery
Published
2019-08-20
Title
Additional Variation Images for WooCommerce < 1.1.29 - Authenticated Stored XSS
Slug
woo-variation-swatches
Published
2019-08-20
Title
Variation Swatches for WooCommerce < 1.0.62 - Reflected XSS
Slug
woo-vehicle-parts-finder
Published
2025-09-30
Title
WooCommerce Vehicle Parts Finder < 3.8 - Unauthenticated Stored Cross-Site Scripting
Slug
woo-vehicle-parts-finder
Published
2025-10-01
Title
WooCommerce Vehicle Parts Finder < 3.8 - Unauthenticated PHP Object Injection
Slug
woo-viet
Published
2024-03-25
Title
Woo Viet < 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
woo-vietnam-checkout
Published
2022-12-09
Title
Woocommerce Vietnam Checkout < 2.0.5 - Reflected XSS