WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-product-feed-pro
Published
2026-08-13
Title
Product Feed PRO for WooCommerce < 13.5.7 - Unauthenticated Feed Configuration Disclosure
Slug
woo-product-feed-pro
Published
2026-10-03
Title
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce < 13.5.8 - Authenticated (Shop Manager+) PHP Object Injection
Slug
woo-product-filter
Published
2023-12-26
Title
Product Filter by WBW < 2.5.1 - Subscriber+ Table Data Access
Slug
woo-product-filter
Published
2024-10-21
Title
Product Filter by WBW < 2.7.1 - Authenticated (Administrator+) SQL Injection
Slug
woo-product-filter
Published
2025-04-03
Title
Product Filter by WBW < 2.8.0 - Unauthenticated SQL Injection via filtersDataBackend Parameter
Slug
woo-product-filter
Published
2025-10-24
Title
Product Filter by WBW < 3.0.1 - Missing Authorization to Unauthenticated Settings Update
Slug
woo-product-filter
Published
2025-10-24
Title
Product Filter by WBW < 2.9.8 - Unauthenticated SQL Injection
Slug
woo-product-filter
Published
2026-03-23
Title
Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi
Slug
woo-product-filter
Published
2026-03-23
Title
Product Filter for WooCommerce by WBW < 3.1.3 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE
Slug
woo-product-filter
Published
2026-04-13
Title
Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQL Injection
Slug
woo-product-filter
Published
2026-09-23
Title
Product Filter for WooCommerce by WBW < 3.1.8 - Unauthenticated SQL Injection
Slug
woo-product-filter
Published
2026-09-08
Title
Product Filter for WooCommerce by WBW < 3.4.3 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter
Slug
woo-product-filter
Published
2026-10-22
Title
Product Filter for WooCommerce by WBW < 3.4.7 - Unauthenticated SQL Injection
Slug
woo-product-filter
Published
2026-10-30
Title
Product Filter for WooCommerce by WBW < 3.4.7 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter
Slug
woo-product-filter
Published
2026-10-30
Title
Product Filter for WooCommerce by WBW < 3.4.7 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter
Slug
woo-product-finder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-product-gallery-slider
Published
2023-05-25
Title
Product Gallery Slider for WooCommerce < 2.2.9 - Cross-Site Request Forgery (CSRF)
Slug
woo-product-pricing-tables
Published
2026-04-14
Title
Product Pricing Table by WooBeWoo < 1.1.1 - Cross-Site Request Forgery to Stored XSS and Pricing Table Deletion
Slug
woo-product-reviews-shortcode
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-product-reviews-shortcode
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-product-reviews-shortcode
Published
2024-03-15
Title
Builder for WooCommerce reviews shortcodes – ReviewShort < 1.01.4 - Cross-Site Request Forgery
Slug
woo-product-reviews-shortcode
Published
2024-05-16
Title
Builder for WooCommerce reviews shortcodes – ReviewShort < 1.01.6 - Missing Authorization
Slug
woo-product-slider
Published
2022-07-26
Title
Product Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options Deletion
Slug
woo-product-slider
Published
2022-12-28
Title
Product Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in Shortcode
Slug
woo-product-slider-and-carousel-with-category
Published
2023-01-24
Title
Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcode