WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-products-filter
Published
2025-12-17
Title
HUSKY – Products Filter Professional for WooCommerce < 1.3.7.4 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'
Slug
woocommerce-products-slider
Published
2021-05-06
Title
PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)
Slug
woocommerce-products-slider
Published
2023-01-23
Title
PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS
Slug
woocommerce-products-slider
Published
2024-09-12
Title
Product Slider for WooCommerce < 1.13.51 - Reflected Cross-Site Scripting
Slug
woocommerce-products-without-featured-images
Published
2025-04-14
Title
WooCommerce Products without featured images <= 0.1 - Cross-Site Request Forgery
Slug
woocommerce-refund-and-exchange
Published
2025-07-17
Title
WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet < 3.2.7 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-role-pricing
Published
2025-04-04
Title
Woocommerce Role Pricing <= 3.5.6 - Cross-Site Request Forgery
Slug
woocommerce-sendinblue-newsletter-subscription
Published
2024-04-22
Title
Sendinblue for WooCommerce < 4.0.18 - Authenticated (Editor+) Arbitrary File Download and Deletion
Slug
woocommerce-sendinblue-newsletter-subscription
Published
2025-12-14
Title
Sendinblue for WooCommerce < 4.0.50 - Missing Authorization
Slug
woocommerce-sendinblue-newsletter-subscription
Published
2026-01-08
Title
Brevo for WooCommerce < 4.0.50 - Unauthenticated Stored Cross-Site Scripting
Slug
woocommerce-shipping-canada-post
Published
2023-11-14
Title
WooCommerce Canada Post Shipping < 2.8.4 - Cross-Site Request Forgery
Slug
woocommerce-shipping-canada-post
Published
2023-12-27
Title
WooCommerce Canada Post Shipping < 2.8.4 - Unauthenticated Unauthorised Action
Slug
woocommerce-shipping-gateway-per-product
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-shipping-gateway-per-product
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-shipping-multiple-addresses
Published
2023-05-15
Title
WooCommerce Ship to Multiple Addresses < 3.8.4 - Subscriber+ Shipping Address Disclosure via IDOR
Slug
woocommerce-shipping-multiple-addresses
Published
2023-07-17
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Cross-Site Request Forgery
Slug
woocommerce-shipping-multiple-addresses
Published
2023-06-26
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Billing Address Update via CSRF
Slug
woocommerce-shipping-multiple-addresses
Published
2023-07-10
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Customer+ Shipping Address Update
Slug
woocommerce-shipping-multiple-addresses
Published
2023-07-10
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Reflected Cross-Site Scripting
Slug
woocommerce-shipping-multiple-addresses
Published
2022-10-05
Title
WooCommerce Ship to Multiple Addresses < 3.7.2 - Reflected Cross-Site Scripting
Slug
woocommerce-shipping-multiple-addresses
Published
2022-10-05
Title
WooCommerce Ship to Multiple Addresses < 3.7.2 - Address Creation/Update/Deletion via CSRF
Slug
woocommerce-shipping-multiple-addresses
Published
2023-12-27
Title
WooCommerce Ship to Multiple Addresses < 3.8.10 - Missing Authorization
Slug
woocommerce-shipping-per-product
Published
2023-12-27
Title
WooCommerce Shipping Per Product < 2.5.5 - Missing Authorization
Slug
woocommerce-simple-registration
Published
2024-04-15
Title
Simple Registration for WooCommerce < 1.5.7 - Unauthenticated Privilege Escalation
Slug
woocommerce-simple-registration
Published
2025-10-24
Title
Simple Registration for WooCommerce < 1.5.9 - Cross-Site Request Forgery to Privilege Escalation via Role Request Approval