WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce
Published
2026-03-03
Title
WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF
Slug
woocommerce
Published
2026-03-03
Title
WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF
Slug
woocommerce
Published
2026-03-03
Title
WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF
Slug
woocommerce
Published
2026-03-03
Title
WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF
Slug
woocommerce
Published
2026-03-03
Title
WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF
Slug
woocommerce-2checkout-payment
Published
2024-04-15
Title
2Checkout Payment Gateway for WooCommerce <= 6.2 - Missing Authorization via sniff_ins
Slug
woocommerce-abandon-cart-pro
Published
2025-06-09
Title
Abandoned Cart Pro for WooCommerce < 9.17.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
woocommerce-abandoned-cart
Published
2015-07-15
Title
Abandoned Cart Lite for WooCommerce < 1.9 - Authenticated Blind SQL Injection
Slug
woocommerce-abandoned-cart
Published
2019-03-11
Title
Abandoned Cart Lite for WooCommerce < 5.2.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
woocommerce-abandoned-cart
Published
2020-11-08
Title
Abandoned Cart Lite for WooCommerce < 5.8.3 - Unauthenticated SQL Injection
Slug
woocommerce-abandoned-cart
Published
2021-03-01
Title
Multiple Plugins - CSRF Nonce Bypasses
Slug
woocommerce-abandoned-cart
Published
2023-06-06
Title
Abandoned Cart Lite for WooCommerce < 5.15.0 - Authentication Bypass
Slug
woocommerce-abandoned-cart
Published
2023-10-16
Title
Abandoned Cart Lite for WooCommerce < 5.16.0 - Admin+ Stored XSS
Slug
woocommerce-abandoned-cart
Published
2023-11-28
Title
Abandoned Cart Lite for WooCommerce < 5.16.2 - Missing Authorization via multiple AJAX functions
Slug
woocommerce-abandoned-cart
Published
2023-11-21
Title
Abandoned Cart Lite for WooCommerce < 5.16.1 - Improper Authorization via wcal_preview_emails
Slug
woocommerce-abandoned-cart
Published
2023-11-21
Title
Abandoned Cart Lite for WooCommerce < 5.16.1 - Improper Authorization via wcal_delete_expired_used_coupon_code
Slug
woocommerce-abandoned-cart
Published
2023-12-01
Title
Abandoned Cart Lite for WooCommerce < 5.16.2 - Multiple CSRF
Slug
woocommerce-abandoned-cart-pro
Published
2019-03-11
Title
Abandoned Cart Lite for WooCommerce < 5.2.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
woocommerce-add-to-cart-custom-redirect
Published
2024-03-07
Title
WooCommerce Add to Cart Custom Redirect < 1.2.14 - Authenticated(Contributor+) Missing Authorization to Limited Arbitrary Options Update
Slug
woocommerce-admin
Published
2021-09-22
Title
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Analytics Report Leaks
Slug
woocommerce-ajax-filters
Published
2019-09-18
Title
Advanced AJAX Product Filters < 1.3.7 - Unauthenticated Plugin Settings Update
Slug
woocommerce-ajax-filters
Published
2021-06-09
Title
Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
woocommerce-ajax-filters
Published
2025-02-27
Title
Advanced AJAX Product Filters < 1.6.8.2 - Reflected Cross-Site Scripting
Slug
woocommerce-ajax-filters
Published
2026-02-17
Title
Advanced AJAX Product Filters < 3.1.9.7 - Author+ PHP Object Injection
Slug
woocommerce-alidropship
Published
2022-10-12
Title
AliExpress Dropshipping and Fulfilment for WooCommerce < 1.1.1 - Unauthenticated Sensitive Data Exposure