WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-product-tables
Published
2024-07-08
Title
Product Table by WBW < 2.0.2 - Unauthenticated Remote Code Execution
Slug
woo-product-tables
Published
2025-01-22
Title
Product Table by WBW < 2.1.3 - Unuthenticated SQL Injection
Slug
woo-product-tables
Published
2025-04-01
Title
Product Table by WBW < 2.1.5 - Reflected Cross-Site Scripting
Slug
woo-product-variation-gallery
Published
2023-07-12
Title
Variation Images Gallery for WooCommerce < 2.3.4 - Reflected Cross-Site Scripting
Slug
woo-product-variation-swatches
Published
2023-07-12
Title
Variation Swatches for WooCommerce < 2.3.8 - Reflected Cross-Site Scripting
Slug
woo-products-widgets-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-products-widgets-for-elementor
Published
2022-12-21
Title
Woo Products Widgets For Elementor < 1.0.8 - Contributor+ Stored XSS via Shortcode
Slug
woo-products-widgets-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-products-widgets-for-elementor
Published
2024-08-12
Title
Woo Products Widgets For Elementor <= 2.0.4 - Contributor+ Local File Inclusion
Slug
woo-producttables-pro
Published
2024-08-22
Title
WBW Product Table Pro < 1.9.5 - Unauthenticated Arbitrary SQL Execution
Slug
woo-producttables-pro
Published
2025-05-30
Title
WBW Product Table PRO < 2.2.7 - Unauthenticated SQL Injection
Slug
woo-qiwi-payment-gateway
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
woo-quick-cart-for-multiple-variations
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-quick-cart-for-multiple-variations
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-quick-reports
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-quick-reports
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-quick-view
Published
2025-01-24
Title
WooCommerce Quick View < 1.1.3 - Unauthenticated Information Disclosure
Slug
woo-quickview
Published
2025-09-22
Title
Quick View for WooCommerce < 2.2.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woo-quickview
Published
2025-11-26
Title
Quick View for WooCommerce < 2.2.18 - Unauthenticated Private Product Disclosure
Slug
woo-quote-calculator-order
Published
2024-10-25
Title
Woocommerce Quote Calculator <= 1.1 - Unauthenticated SQL Injection
Slug
woo-quote-calculator-order
Published
2024-10-31
Title
Woocommerce Quote Calculator <= 1.1 - Authenticated (Contributor+) SQL Injection
Slug
woo-razorpay
Published
2023-11-28
Title
Razorpay for WooCommerce < 4.5.7 - Subscriber+ Transfers Manipulation
Slug
woo-razorpay
Published
2023-11-28
Title
Razorpay for WooCommerce < 4.5.7 - Transfers Manipulation via CSRF
Slug
woo-razorpay
Published
2026-02-18
Title
Razorpay for WooCommerce < 4.7.9 - Unauthenticated Order Modification
Slug
woo-razorpay
Published
2026-02-16
Title
Razorpay for WooCommerce < 4.8.4 - Missing Authorization