WordPress Plugin Vulnerabilities | Page 50 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

wooCommerce-order-proposal

Published

2024-10-22

Title

WooCommerce Order Proposal < 2.0.6 - Authenticated (Shop Manager+) Privilege Escalation via Order Proposal

Slug

Published

2025-05-07

Title

Woobox < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-05-07

Title

Woobox < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2014-08-01

Title

WooCommerce 2.0.17 - hide-wc-extensions-message Parameter Reflected XSS

Slug

Published

2014-08-01

Title

WooCommerce 2.0.12 - index.php calc_shipping_state Parameter XSS

Slug

Published

2014-09-21

Title

WooCommerce < 2.2.3 - Reflected Cross-Site Scripting (XSS)

Slug

Published

2014-09-17

Title

WooCommerce <= 2.2.2 - Reflected Cross-Site Scripting (XSS)

Slug

Published

2015-02-22

Title

WooCommerce <= 2.2.10 - Cross-Site Scripting (XSS)

Slug

Published

2015-03-13

Title

WooCommerce 2.3 - 2.3.5 - SQL Injection

Slug

Published

2015-06-10

Title

WooCommerce 2.0.20-2.3.10 - Object Injection / XXE

Slug

Published

2015-11-17

Title

WooCommerce <= 2.4.8 - Authenticated Cross-Site Scripting (XSS)

Slug

Published

2016-07-19

Title

WooCommerce <= 2.6.2 - Authenticated Cross-Site Scripting (XSS)

Slug

Published

2016-09-09

Title

WooCommerce <= 2.6.3 - Stored Cross Site Scripting (XSS) via REST API

Slug

Published

2016-12-07

Title

WooCommerce <= 2.6.8 - Authenticated Tax-Rate CSV XSS

Slug

Published

2017-11-16

Title

WooCommerce <= 3.2.3 - Authenticated PHP Object Injection

Slug

Published

2018-08-29

Title

WooCommerce <= 3.4.4 - Potential Object Injection

Slug

Published

2018-10-11

Title

WooCommerce <= 3.4.5 - Authenticated Object Injection

Slug

Published

2018-10-11

Title

WooCommerce <= 3.4.5 - Authenticated File Deletion to Privilege Escalation

Slug

Published

2018-12-10

Title

WooCommerce <= 3.4.5 - Authenticated Stored XSS

Slug

Published

2018-12-10

Title

WooCommerce <= 3.4.5 - Authenticated Phar Deserialization

Slug

Published

2018-12-21

Title

WooCommerce <= 3.5.0 - Authenticated Stored XSS

Slug

Published

2019-02-20

Title

WooCommerce <= 3.5.4 - Stored Cross-Site Scripting (XSS)

Slug

Published

2019-07-07

Title

WooCommerce <= 3.6.4 - Cross-Site Request Forgery (CSRF) & File Type Check

Slug

Published

2020-05-12

Title

WooCommerce < 4.1.0 - Unescaped Metadata when Duplicating Products

Slug

Published

2020-06-23

Title

WooCommerce < 4.2.1 - Potential Cross-Site Scripting (XSS) via SelectWoo