WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woo-product-slider-pro
Published
2026-06-03
Title
ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
Slug
woo-product-table
Published
2022-03-22
Title
Woo Product Table < 3.1.2 - Unauthenticated Arbitrary Function Call
Slug
woo-product-table
Published
2024-11-22
Title
Product Table for WooCommerce by CodeAstrology (wooproducttable.com) < 3.5.2 - Information Exposure
Slug
woo-product-table
Published
2025-01-06
Title
Product Table for WooCommerce < 5.0.0 - Reflected XSS
Slug
woo-product-table
Published
2025-12-20
Title
Product Table for WooCommerce < 5.0.9 - Reflected Cross-Site Scripting
Slug
woo-product-tables
Published
2023-12-27
Title
Product Table by WBW < 1.8.7 - Cross-Site Request Forgery via saveGroup
Slug
woo-product-tables
Published
2024-07-08
Title
Product Table by WBW < 2.0.2 - Unauthenticated Remote Code Execution
Slug
woo-product-tables
Published
2025-01-22
Title
Product Table by WBW < 2.1.3 - Unuthenticated SQL Injection
Slug
woo-product-tables
Published
2025-04-01
Title
Product Table by WBW < 2.1.5 - Reflected Cross-Site Scripting
Slug
woo-product-variation-gallery
Published
2023-07-12
Title
Variation Images Gallery for WooCommerce < 2.3.4 - Reflected Cross-Site Scripting
Slug
woo-product-variation-swatches
Published
2023-07-12
Title
Variation Swatches for WooCommerce < 2.3.8 - Reflected Cross-Site Scripting
Slug
woo-products-restricted-users
Published
2026-10-12
Title
Products Restricted Users for WooCommerce < 0.8 - Missing Authorization
Slug
woo-products-widgets-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-products-widgets-for-elementor
Published
2022-12-21
Title
Woo Products Widgets For Elementor < 1.0.8 - Contributor+ Stored XSS via Shortcode
Slug
woo-products-widgets-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-products-widgets-for-elementor
Published
2024-08-12
Title
Woo Products Widgets For Elementor <= 2.0.4 - Contributor+ Local File Inclusion
Slug
woo-producttables-pro
Published
2024-08-22
Title
WBW Product Table Pro < 1.9.5 - Unauthenticated Arbitrary SQL Execution
Slug
woo-producttables-pro
Published
2025-05-30
Title
WBW Product Table PRO < 2.2.7 - Unauthenticated SQL Injection
Slug
woo-qiwi-payment-gateway
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
woo-quick-cart-for-multiple-variations
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-quick-cart-for-multiple-variations
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-quick-reports
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woo-quick-reports
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woo-quick-view
Published
2025-01-24
Title
WooCommerce Quick View < 1.1.3 - Unauthenticated Information Disclosure
Slug
woo-quickview
Published
2025-09-22
Title
Quick View for WooCommerce < 2.2.17 - Authenticated (Contributor+) Stored Cross-Site Scripting