WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-abandoned-cart
Published
2023-11-28
Title
Abandoned Cart Lite for WooCommerce < 5.16.2 - Missing Authorization via multiple AJAX functions
Slug
woocommerce-abandoned-cart
Published
2023-11-21
Title
Abandoned Cart Lite for WooCommerce < 5.16.1 - Improper Authorization via wcal_preview_emails
Slug
woocommerce-abandoned-cart
Published
2023-11-21
Title
Abandoned Cart Lite for WooCommerce < 5.16.1 - Improper Authorization via wcal_delete_expired_used_coupon_code
Slug
woocommerce-abandoned-cart
Published
2023-12-01
Title
Abandoned Cart Lite for WooCommerce < 5.16.2 - Multiple CSRF
Slug
woocommerce-abandoned-cart-pro
Published
2019-03-11
Title
Abandoned Cart Lite for WooCommerce < 5.2.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
woocommerce-add-to-cart-custom-redirect
Published
2024-03-07
Title
WooCommerce Add to Cart Custom Redirect < 1.2.14 - Authenticated(Contributor+) Missing Authorization to Limited Arbitrary Options Update
Slug
woocommerce-admin
Published
2021-09-22
Title
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Analytics Report Leaks
Slug
woocommerce-ajax-filters
Published
2019-09-18
Title
Advanced AJAX Product Filters < 1.3.7 - Unauthenticated Plugin Settings Update
Slug
woocommerce-ajax-filters
Published
2021-06-09
Title
Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
woocommerce-ajax-filters
Published
2025-02-27
Title
Advanced AJAX Product Filters < 1.6.8.2 - Reflected Cross-Site Scripting
Slug
woocommerce-alidropship
Published
2022-10-12
Title
AliExpress Dropshipping and Fulfilment for WooCommerce < 1.1.1 - Unauthenticated Sensitive Data Exposure
Slug
woocommerce-all-currencies
Published
2025-06-05
Title
All Currencies for WooCommerce < 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woocommerce-amazon-affiliates-light-version
Published
2022-09-30
Title
WZone - Lite <= 3.1 - CSRF
Slug
woocommerce-anti-fraud
Published
2020-11-22
Title
WooCommerce Anti-Fraud < 3.9 - Unauthenticated Order Status Manipulation
Slug
woocommerce-aweber-newsletter-subscription
Published
2024-04-30
Title
WooCommerce AWeber Newsletter Subscription < 4.0.3 - Missing Authorization to Access Token Modification
Slug
woocommerce-basic-ordernumbers
Published
2024-12-14
Title
WooCommerce Basic Ordernumbers <= 1.4.4 - Missing Authorization
Slug
woocommerce-beta-tester
Published
2023-09-12
Title
WooCommerce Beta Tester < 2.2.4 - Admin+ SQLi
Slug
woocommerce-booking
Published
2024-11-25
Title
Booking & Appointment Plugin for WooCommerce < 6.10.0 - Subscriber+ Arbitrary Option Update
Slug
woocommerce-bookings
Published
2023-11-14
Title
WooCommerce Bookings < 2.0.4 - Cross-Site Request Forgery
Slug
woocommerce-bookings
Published
2025-03-12
Title
WooCommerce Bookings < 2.2.5 - Unauthenticated Bookings Products Data and Metadata Disclosure via REST API
Slug
woocommerce-box-office
Published
2023-06-02
Title
WooCommerce Box Office < 1.1.51 - Contributor+ Stored XSS
Slug
woocommerce-box-office
Published
2023-06-02
Title
WooCommerce Box Office < 1.1.52 - Unauthenticated Ticket Barcode Update
Slug
woocommerce-box-office
Published
2024-01-31
Title
WooCommerce Box Office < 1.2.3 - Missing Authorization
Slug
woocommerce-brands
Published
2023-05-15
Title
WooCommerce Brands < 1.6.46 - Contributor+ Stored XSS
Slug
woocommerce-brands
Published
2023-07-17
Title
WooCommerce Brands < 1.6.50 - Cross-Site Request Forgery