WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-product-vendors
Published
2017-08-22
Title
WooCommerce Product Vendors Plugin < 2.0.36 - Unauthenticated Reflected XSS
Slug
woocommerce-product-vendors
Published
2022-10-04
Title
WooCommerce Products Vendor < 2.1.66 - Unauthenticated Blind SQLi
Slug
woocommerce-product-vendors
Published
2022-10-04
Title
WooCommerce Products Vendor < 2.1.66 - Note Creation via IDOR
Slug
woocommerce-product-vendors
Published
2022-11-24
Title
WooCommerce Product Vendors < 2.1.69 - Vendor Commission Percentage Update via IDOR
Slug
woocommerce-product-vendors
Published
2023-05-24
Title
WooCommerce Product Vendors < 2.1.77 - Unauthenticated Reflected XSS
Slug
woocommerce-product-vendors
Published
2023-06-21
Title
WooCommerce Product Vendors < 2.1.77 - Reflected XSS
Slug
woocommerce-product-vendors
Published
2023-06-21
Title
WooCommerce Product Vendors < 2.1.77 - Vendor Admin+ SQLi
Slug
woocommerce-product-vendors
Published
2023-06-19
Title
WooCommerce Product Vendors < 2.1.79 - ShopManager+ SQLi
Slug
woocommerce-product-vendors
Published
2023-12-29
Title
WooCommerce Product Vendors < 2.2.3 - Missing Authorization
Slug
woocommerce-product-vendors
Published
2023-12-27
Title
WooCommerce Product Vendors < 2.2.2 - Missing Authorization
Slug
woocommerce-products-by-custom-tax
Published
2025-11-10
Title
Woocommerce – Products By Custom Tax <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
woocommerce-products-designer
Published
2023-04-19
Title
Woocommerce Product Designer <= 4.3.3 - CSRF
Slug
woocommerce-products-filter
Published
2018-03-14
Title
WooCommerce Products Filter < 1.2.0 - Multiple Issues
Slug
woocommerce-products-filter
Published
2021-12-28
Title
WOOF - Products Filter for WooCommerce < 1.2.6.3 - Reflected Cross-Site Scripting
Slug
woocommerce-products-filter
Published
2023-01-11
Title
WOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object Injection
Slug
woocommerce-products-filter
Published
2023-11-23
Title
HUSKY – Products Filter for WooCommerce (formerly WOOF) < 1.3.4.3 - Missing Authorization via woof_meta_get_keys()
Slug
woocommerce-products-filter
Published
2023-11-27
Title
HUSKY – Products Filter for WooCommerce (formerly WOOF) < 1.3.4.3 - Unauthenticated SQL Injection via search terms
Slug
woocommerce-products-filter
Published
2023-12-22
Title
HUSKY < 1.3.4.4 - Multiple Connections/Stats CSRF
Slug
woocommerce-products-filter
Published
2024-03-14
Title
HUSKY – Products Filter for WooCommerce Professional < 1.3.5.2 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
woocommerce-products-filter
Published
2024-03-14
Title
HUSKY – Products Filter for WooCommerce Professional < 1.3.5.3 - Contributor+ SQL Injection
Slug
woocommerce-products-filter
Published
2024-03-28
Title
HUSKY < 1.3.5.3 - Admin+ Local File Inclusion
Slug
woocommerce-products-filter
Published
2024-03-28
Title
HUSKY – Products Filter for WooCommerce (formerly WOOF) < 1.3.5.2 - Cross-Site Request Forgery
Slug
woocommerce-products-filter
Published
2024-04-17
Title
HUSKY – Products Filter for WooCommerce (formerly WOOF) < 1.3.5.3 - Subscriber+ Remote Code Execution
Slug
woocommerce-products-filter
Published
2024-05-28
Title
HUSKY – Products Filter Professional for WooCommerce < 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
woocommerce-products-filter
Published
2024-07-15
Title
HUSKY - Products Filter Professional for WooCommerce < 1.3.6.1 - Unauthenticated Time-Based SQL Injection