WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-product-attachment
Published
2023-08-11
Title
WooCommerce Product Attachment < 2.2.0 - Checkout Attachements Update via CSRF
Slug
woo-product-attachment
Published
2026-07-21
Title
WooCommerce Product Attachment < 2.3.3 - Unauthenticated Arbitrary Media Download
Slug
woo-product-attachment
Published
2026-09-01
Title
Product Attachment for WooCommerce <= 2.3.3 - Unauthenticated Information Exposure
Slug
woo-product-bundle
Published
2023-12-28
Title
WPC Product Bundles for WooCommerce < 7.3.2 - Cross-Site Request Forgery
Slug
woo-product-bundle
Published
2026-02-22
Title
WPC Product Bundles for WooCommerce < 8.4.6 - Missing Authorization
Slug
woo-product-bundle
Published
2026-06-01
Title
WPC Product Bundles for WooCommerce < 8.5.4 - Missing Authorization
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2024-03-05
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.9.8 - Authenticated(Contributor+) PHP Object Injection
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2024-09-16
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.10.0 - Contributor+ Local File Inclusion
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2024-12-11
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.10.0 - Authenticated (Contributor+) Local File Inclusion via 'theme'
Slug
woo-product-carousel-slider-and-grid-ultimate
Published
2025-01-24
Title
Product Carousel Slider & Grid Ultimate for WooCommerce < 1.10.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
woo-product-category-discount
Published
2024-01-24
Title
Category Discount Woocommerce < 4.13 - Missing Authorization via wpcd_save_discount()
Slug
woo-product-design
Published
2024-10-25
Title
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
woo-product-design
Published
2024-10-29
Title
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Download
Slug
woo-product-design
Published
2024-10-28
Title
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Deletion
Slug
woo-product-enquiry
Published
2023-11-08
Title
WooCommerce Product Enquiry <= 2.3.4 - Unauthenticated Stored XSS
Slug
woo-product-feed-pro
Published
2021-12-23
Title
Product Feed PRO for WooCommerce < 11.0.7 - Subscriber+ Settings Update to Stored XSS
Slug
woo-product-feed-pro
Published
2022-02-01
Title
Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting
Slug
woo-product-feed-pro
Published
2023-03-22
Title
Product Feed PRO for WooCommerce < 12.4.5 - Multiple CSRF
Slug
woo-product-feed-pro
Published
2024-03-26
Title
Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More < 13.2.6 - Reflected Cross-Site Scripting
Slug
woo-product-feed-pro
Published
2024-04-15
Title
Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More < 13.3.2 - Sensitive Information Exposure via Log Files
Slug
woo-product-feed-pro
Published
2026-04-07
Title
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce 13.4.6 - 13.5.2.1 - Cross-Site Request Forgery to Multiple Administrative Actions
Slug
woo-product-feed-pro
Published
2026-03-05
Title
Product Feed PRO for WooCommerce < 13.5.2.1 - Cross-Site Request Forgery
Slug
woo-product-feed-pro
Published
2026-08-13
Title
Product Feed PRO for WooCommerce < 13.5.7 - Unauthenticated Feed Configuration Disclosure
Slug
woo-product-filter
Published
2023-12-26
Title
Product Filter by WBW < 2.5.1 - Subscriber+ Table Data Access
Slug
woo-product-filter
Published
2024-10-21
Title
Product Filter by WBW < 2.7.1 - Authenticated (Administrator+) SQL Injection