WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-checkout-field-editor
Published
2023-09-11
Title
Checkout Field Editor < 1.7.5 - Cross-Site Request Forgery to Checkout Fields Update
Slug
woocommerce-checkout-field-editor-pro
Published
2024-06-03
Title
Checkout Field Editor for WooCommerce (Pro) < 3.6.3 - Unauthenticated Arbitrary File Deletion
Slug
woocommerce-checkout-manager
Published
2019-04-25
Title
WooCommerce Checkout Manager < 4.3 - Arbitrary File Upload
Slug
woocommerce-checkout-manager
Published
2022-06-14
Title
Checkout Fields Manager for WooCommerce < 5.5.7 - Reflected Cross-Site Scripting
Slug
woocommerce-checkout-manager
Published
2023-11-09
Title
WooCommerce Checkout Manager < 7.3.1 - Missing Authorization
Slug
woocommerce-checkout-manager
Published
2026-02-18
Title
Checkout Field Manager (Checkout Manager) for WooCommerce < 7.8.2 - Unauthenticated Limited File Upload
Slug
woocommerce-checkout-manager
Published
2026-02-18
Title
Checkout Field Manager (Checkout Manager) for WooCommerce < 7.8.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
Slug
woocommerce-cloak-affiliate-links
Published
2024-03-20
Title
WooCommerce Cloak Affiliate Links < 1.0.34 - Missing Authorization to Unauthenticated Permalink Modification
Slug
woocommerce-cloak-affiliate-links
Published
2025-01-24
Title
WooCommerce Cloak Affiliate Links < 1.0.36 - Cross-Site Request Forgery
Slug
woocommerce-collections
Published
2024-08-07
Title
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Missing Authorization to Unauthenticated Arbitrary Post/Page Deletion
Slug
woocommerce-collections
Published
2024-08-07
Title
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Unauthenticated SQL Injection
Slug
woocommerce-compare-products
Published
2025-01-06
Title
Compare Products for WooCommerce < 3.2.2 - Unauthenticated PHP Object Injection
Slug
woocommerce-compare-products
Published
2025-01-06
Title
Compare Products for WooCommerce < 3.2.2 - Reflected Cross-Site Scripting
Slug
woocommerce-composite-products
Published
2023-05-15
Title
WooCommerce Composite Products < 8.7.6 - Reflected XSS
Slug
woocommerce-conversion-tracking
Published
2020-01-03
Title
WooCommerce Conversion Tracking < 2.0.5 - CSRF to XSS
Slug
woocommerce-conversion-tracking
Published
2024-01-03
Title
WooCommerce Conversion Tracking < 2.0.12 - Subscriber+ happy-elementor-addons Installation & Activation
Slug
woocommerce-conversion-tracking
Published
2024-01-31
Title
WooCommerce Conversion Tracking < 2.0.12 - Subscriber+ Addon Installation
Slug
woocommerce-country-based-payments
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-country-based-payments
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-csvimport
Published
2017-12-27
Title
woocommerce-csvimport 3.3.6 – Authenticated Arbitrary File Deletion
Slug
woocommerce-currency-switcher
Published
2021-07-22
Title
WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion
Slug
woocommerce-currency-switcher
Published
2021-11-08
Title
WooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site Scripting
Slug
woocommerce-currency-switcher
Published
2021-12-13
Title
WOOCS < 1.3.7.3 - Reflected Cross-Site Scripting
Slug
woocommerce-currency-switcher
Published
2022-01-19
Title
WOOCS < 1.3.7.5 - Reflected Cross-Site Scripting
Slug
woocommerce-currency-switcher
Published
2022-12-20
Title
WOOCS < 1.3.9.3 - Contributor+ Stored XSS