WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-product-addon
Published
2023-05-01
Title
Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting
Slug
woocommerce-product-addon
Published
2024-04-25
Title
Product Addons & Fields for WooCommerce < 32.0.19 - Unauthenticated Arbitrary File Upload via ppom_upload_file
Slug
woocommerce-product-addon
Published
2024-06-06
Title
PPOM for WooCommerce < 32.0.21 - Unauthenticated Content Injection Vulnerability
Slug
woocommerce-product-addon
Published
2025-01-24
Title
PPOM for WooCommerce < 33.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
woocommerce-product-addon
Published
2025-10-17
Title
PPOM – Product Addons & Custom Fields for WooCommerce < 33.0.16 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-product-addon
Published
2025-10-17
Title
PPOM – Product Addons & Custom Fields for WooCommerce < 33.0.16 - Unauthenticated SQL Injection
Slug
woocommerce-product-addon
Published
2025-11-17
Title
PPOM for WooCommerce < 33.0.17 - Missing Authorization
Slug
woocommerce-product-addons
Published
2023-05-15
Title
WooCommerce Product Add-ons < 6.2.0 - Cross-Site Request Forgery
Slug
woocommerce-product-addons
Published
2023-05-15
Title
WooCommerce Product Add-ons < 6.2.0 - Shop Manager+ PHP Object Injection
Slug
woocommerce-product-category-selection-widget
Published
2023-05-25
Title
WooCommerce Product Categories Selection Widget <= 2.0 - Reflected XSS
Slug
woocommerce-product-importer
Published
2022-06-16
Title
WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site Scripting
Slug
woocommerce-product-payments
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-product-payments
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-product-payments
Published
2023-10-02
Title
Dreamfox Media Payment gateway per Product for Woocommerce < 3.2.8 - Reflected XSS
Slug
woocommerce-product-payments
Published
2024-12-14
Title
Dreamfox Media Payment gateway per Product for Woocommerce < 3.5.9 - Missing Authorization
Slug
woocommerce-product-recommendations
Published
2023-05-15
Title
WooCommerce Product Recommendations < 2.3.0 - CSRF
Slug
woocommerce-product-sort-and-display
Published
2024-04-01
Title
Product Sort and Display for WooCommerce < 2.4.2 - Missing Authorization
Slug
woocommerce-product-vendors
Published
2017-08-22
Title
WooCommerce Product Vendors Plugin < 2.0.36 - Unauthenticated Reflected XSS
Slug
woocommerce-product-vendors
Published
2022-10-04
Title
WooCommerce Products Vendor < 2.1.66 - Unauthenticated Blind SQLi
Slug
woocommerce-product-vendors
Published
2022-10-04
Title
WooCommerce Products Vendor < 2.1.66 - Note Creation via IDOR
Slug
woocommerce-product-vendors
Published
2022-11-24
Title
WooCommerce Product Vendors < 2.1.69 - Vendor Commission Percentage Update via IDOR
Slug
woocommerce-product-vendors
Published
2023-05-24
Title
WooCommerce Product Vendors < 2.1.77 - Unauthenticated Reflected XSS
Slug
woocommerce-product-vendors
Published
2023-06-21
Title
WooCommerce Product Vendors < 2.1.77 - Reflected XSS
Slug
woocommerce-product-vendors
Published
2023-06-21
Title
WooCommerce Product Vendors < 2.1.77 - Vendor Admin+ SQLi
Slug
woocommerce-product-vendors
Published
2023-06-19
Title
WooCommerce Product Vendors < 2.1.79 - ShopManager+ SQLi