WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-customers-manager
Published
2024-07-11
Title
WooCommerce Customers Manager < 30.1 - User Deletion via CSRF
Slug
woocommerce-customers-manager
Published
2024-07-11
Title
WooCommerce Customers Manager < 30.1 - Bulk Action via CSRF
Slug
woocommerce-customers-manager
Published
2025-01-31
Title
WooCommerce Customers Manager < 31.4 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
woocommerce-cvr-payment-gateway
Published
2023-09-13
Title
WooCommerce CVR Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) CVR Update
Slug
woocommerce-delivery-date
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-delivery-notes
Published
2023-02-02
Title
Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS
Slug
woocommerce-delivery-notes
Published
2024-04-26
Title
Multiple Plugins by tychesoftwares <= (Various Versions) - Missing Authorization to Notice Dismissal
Slug
woocommerce-delivery-notes
Published
2024-12-23
Title
Print Invoice & Delivery Notes for WooCommerce < 5.4.1 - Missing Authorization to Authenticated (Subscriber+) Logo Deletion
Slug
woocommerce-delivery-notes
Published
2025-03-07
Title
Print Invoice & Delivery Notes for WooCommerce < 5.5.0 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
woocommerce-delivery-notes
Published
2025-06-05
Title
Print Invoice & Delivery Notes for WooCommerce < 5.6.0 - Cross-Site Request Forgery
Slug
woocommerce-delivery-notes
Published
2025-12-23
Title
Print Invoice & Delivery Notes for WooCommerce < 5.9.0 - Unauthenticated Remote Code Execution
Slug
woocommerce-digital-content-delivery-with-drm-flickrocket
Published
2025-01-06
Title
WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket < 4.76 - Reflected Cross-Site Scripting
Slug
woocommerce-discounts-plus
Published
2021-10-12
Title
Discounts Manager for Products < 3.4.5 - Reflected Cross-Site Scripting
Slug
woocommerce-display-products-by-tags
Published
2025-02-24
Title
WooCommerce Display Products by Tags <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woocommerce-dropshipping
Published
2022-10-17
Title
WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
Slug
woocommerce-dropshipping
Published
2024-06-06
Title
WooCommerce Dropshipping <= 5.1.2 - Unauthenticated Arbitrary Email Send
Slug
woocommerce-ean-payment-gateway
Published
2023-09-13
Title
WooCommerce EAN Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) EAN Update
Slug
woocommerce-email-test
Published
2016-12-08
Title
WooCommerce Email Test 1.5 - Order Information Disclosure
Slug
woocommerce-es
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-es
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-eu-vat-assistant
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-eu-vat-assistant
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-exporter
Published
2014-10-11
Title
WooCommerce Store Exporter 1.7.5 - Cross Site Scripting (XSS)
Slug
woocommerce-exporter
Published
2016-02-10
Title
Woocommerce Exporter < 1.8.4 - Privilege Esclation
Slug
woocommerce-exporter
Published
2020-01-09
Title
WooCommerce - Store Exporter < 2.4 - CSV Injection