WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-payu-paisa
Published
2019-08-25
Title
WooCommerce PayU India <= 2.1.1 - Price Tampering
Slug
woocommerce-pdf-invoices-packing-slips
Published
2017-02-10
Title
Woocommerce PDF Invoices Packing Slips < 2.0.13 - XSS
Slug
woocommerce-pdf-invoices-packing-slips
Published
2021-12-06
Title
WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2022-06-14
Title
WooCommerce PDF Invoices & Packing Slips < 2.15.0 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2022-06-20
Title
WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2022-08-03
Title
WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-01-12
Title
PDF Invoices & Packing Slips for WooCommerce < 3.7.6 - Shop Manager+ SQL Injection
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-04-24
Title
PDF Invoices & Packing Slips for WooCommerce < 3.8.1 - Unauthenticated Stored Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-04-24
Title
PDF Invoices & Packing Slips for WooCommerce < 3.8.1 - Unauthenticated Server-Side Request Forgery
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-10-24
Title
WooCommerce PDF Invoices & Packing Slips < 3.8.7 - Missing Authorization
Slug
woocommerce-pdf-invoices-packing-slips
Published
2025-12-07
Title
WooCommerce PDF Invoices & Packing Slips < 5.0.0 - Missing Authorization
Slug
woocommerce-pdf-invoices-packing-slips
Published
2026-02-17
Title
PDF Invoices & Packing Slips for WooCommerce < 5.7.0 - Missing Authorization to Authenticated (Subscriber+) Peppol Identifier Modification
Slug
woocommerce-pdf-vouchers
Published
2024-07-23
Title
WooCommerce - PDF Vouchers < 4.9.4 - Authentication Bypass to Voucher Vendor
Slug
woocommerce-pdf-vouchers
Published
2024-08-01
Title
WooCommerce PDF Vouchers < 4.9.5 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-vouchers
Published
2024-08-01
Title
WooCommerce PDF Vouchers < 4.9.5 - Unauthenticated Arbitrary File Deletion
Slug
woocommerce-pdf-vouchers
Published
2024-08-01
Title
WooCommerce PDF Vouchers < 4.9.5 - Missing Authorization
Slug
woocommerce-pdf-vouchers
Published
2024-12-19
Title
WooCommerce PDF Vouchers < 4.9.9 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-vouchers
Published
2024-12-11
Title
WooCommerce PDF Vouchers < 4.9.9 - Authentication Bypass
Slug
woocommerce-photo-reviews
Published
2024-09-10
Title
WooCommerce Photo Reviews Premium < 1.3.14 - Authentication Bypass to Account Takeover and Privilege Escalation
Slug
woocommerce-photo-reviews
Published
2025-06-03
Title
WooCommerce Photo Reviews - Review Reminders - Review for Discounts <= 1.3.13 - Reflected Cross-Site Scripting
Slug
woocommerce-pos
Published
2024-03-19
Title
WooCommerce POS < 1.4.12 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure
Slug
woocommerce-pos
Published
2025-05-16
Title
WooCommerce POS < 1.7.9 - Missing Authorization
Slug
woocommerce-pre-orders
Published
2023-06-21
Title
WooCommerce Pre-Orders < 2.0.1 - Contributor+ Stored XSS
Slug
woocommerce-pre-orders
Published
2023-06-26
Title
WooCommerce Pre-Orders < 2.0.2 - Reflected XSS
Slug
woocommerce-pre-orders
Published
2023-07-10
Title
WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF