WordPress Plugin Vulnerabilities | Page 46 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2016-07-19

Title

WooCommerce <= 2.6.2 - Authenticated Cross-Site Scripting (XSS)

Slug

Published

2016-09-09

Title

WooCommerce <= 2.6.3 - Stored Cross Site Scripting (XSS) via REST API

Slug

Published

2016-12-07

Title

WooCommerce <= 2.6.8 - Authenticated Tax-Rate CSV XSS

Slug

Published

2017-11-16

Title

WooCommerce <= 3.2.3 - Authenticated PHP Object Injection

Slug

Published

2018-08-29

Title

WooCommerce <= 3.4.4 - Potential Object Injection

Slug

Published

2018-10-11

Title

WooCommerce <= 3.4.5 - Authenticated Object Injection

Slug

Published

2018-10-11

Title

WooCommerce <= 3.4.5 - Authenticated File Deletion to Privilege Escalation

Slug

Published

2018-12-10

Title

WooCommerce <= 3.4.5 - Authenticated Stored XSS

Slug

Published

2018-12-10

Title

WooCommerce <= 3.4.5 - Authenticated Phar Deserialization

Slug

Published

2018-12-21

Title

WooCommerce <= 3.5.0 - Authenticated Stored XSS

Slug

Published

2019-02-20

Title

WooCommerce <= 3.5.4 - Stored Cross-Site Scripting (XSS)

Slug

Published

2019-07-07

Title

WooCommerce <= 3.6.4 - Cross-Site Request Forgery (CSRF) & File Type Check

Slug

Published

2020-05-12

Title

WooCommerce < 4.1.0 - Unescaped Metadata when Duplicating Products

Slug

Published

2020-06-23

Title

WooCommerce < 4.2.1 - Potential Cross-Site Scripting (XSS) via SelectWoo

Slug

Published

2020-11-06

Title

WooCommerce < 4.6.2 - Guest Account Creation

Slug

Published

2020-12-28

Title

WooCommerce < 4.7.0 - Arbitrary Order Status Disclosure via IDOR

Slug

Published

2021-04-21

Title

Woocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS)

Slug

Published

2021-07-15

Title

Woocommerce 3.3 to 5.5 - Authenticated Blind SQL Injection

Slug

Published

2021-09-22

Title

WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Analytics Report Leaks

Slug

Published

2022-02-23

Title

WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion

Slug

Published

2022-02-23

Title

WooCommerce < 6.2.1 - Path Traversal via Importers

Slug

Published

2022-03-10

Title

WooCommerce < 6.3.1 - Orders Marked as Paid (via PayPal Standard Gateway)

Slug

Published

2022-06-20

Title

WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

Slug

Published

2023-09-11

Title

WooCommerce < 7.9 - Unauthenticated Sensitive Information Disclosure

Slug

Published

2023-09-11

Title

WooCommerce < 8.1.1 - Shop Manager+ User Metadata Disclosure