WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-order-notes
Published
2024-12-10
Title
WPC Order Notes for WooCommerce < 1.5.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
woo-order-splitter
Published
2025-04-01
Title
Order Splitter for WooCommerce < 5.3.1 - Authenticated (Subscriber+) SQL Injection
Slug
woo-order-splitter
Published
2026-02-17
Title
Order Splitter for WooCommerce < 5.3.6 - Missing Authorization to Authenticated (Subscriber+) Order Information Exposure
Slug
woo-order-status-per-product
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-order-status-per-product
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-orders-tracking
Published
2021-12-27
Title
Orders Tracking for WooCommerce < 1.1.10 - Reflected Cross-Site Scripting
Slug
woo-orders-tracking
Published
2023-08-14
Title
Orders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/Read
Slug
woo-orders-tracking
Published
2024-05-09
Title
Orders Tracking for WooCommerce < 1.2.11 - Unauthenticated Arbitrary Shortcode Execution
Slug
woo-oscommerce-sync
Published
2025-02-02
Title
Woocommerce osCommerce Sync <= 2.0.20 - Unauthenticated Stored Cross-Site Scripting
Slug
woo-parcel-pro
Published
2023-10-25
Title
Parcel Pro < 1.6.12 - Open Redirect
Slug
woo-parcel-pro
Published
2023-11-22
Title
WooCommerce Parcel Pro < 1.6.12 - Cross-Site Request Forgery
Slug
woo-parcel-pro
Published
2024-10-17
Title
Parcel Pro < 1.9.0 - Reflected Cross-Site Scripting
Slug
woo-paylate
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-paylate
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-payment-bkash
Published
2025-11-20
Title
Payment Gateway bKash for WC <= 3.1.0 - Missing Authorization
Slug
woo-payment-gateway
Published
2025-11-11
Title
Payment Plugins Braintree For WooCommerce < 3.2.79 - Missing Authorization to Payment Token Exposure and Transaction Fraud
Slug
woo-payment-gateway-for-piraeus-bank
Published
2024-02-16
Title
Piraeus Bank WooCommerce Payment Gateway < 1.7.0 - Unauthenticated SQL Injection
Slug
woo-payment-gateway-for-piraeus-bank
Published
2026-01-06
Title
Piraeus Bank WooCommerce Payment Gateway < 3.1.5 - Missing Authorization to Unauthenticated Arbitrary Order Status Change
Slug
woo-payment-gateway-for-piraeus-bank
Published
2026-08-18
Title
Piraeus Bank WooCommerce Payment Gateway 3.2.0 - Missing Authorization
Slug
woo-payment-gateway-paysera
Published
2025-12-04
Title
WooCommerce Payment Gateway – Paysera < 3.11.0 - Missing Authorization
Slug
woo-paypal-gateway
Published
2025-11-30
Title
Payment Gateway for PayPal on WooCommerce < 9.0.54 - Missing Authorization
Slug
woo-paypal-gateway
Published
2026-07-22
Title
Payment Gateway for PayPal on WooCommerce < 9.1.5 - Missing Authorization
Slug
woo-paypal-gateway
Published
2026-08-03
Title
Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via PayPal Advanced Return Handler
Slug
woo-payrexx-gateway
Published
2025-09-22
Title
Payrexx Payment Gateway for WooCommerce < 3.1.6 - Missing Authorization
Slug
woo-pdf-invoice-builder
Published
2023-08-11
Title
WooCommerce PDF Invoice Builder < 1.2.90 - Subscriber+ SQLi