WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-smart-coupons
Published
2020-03-04
Title
WooCommerce Smart Coupons < 4.6.5 - Unauthenticated Coupon Creation
Slug
woocommerce-social-media-share-buttons
Published
2024-03-29
Title
Woocommerce Social Media Share Buttons <= 1.3.0 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
woocommerce-square
Published
2026-01-09
Title
WooCommerce Square < 5.1.2 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id
Slug
woocommerce-stock-manager
Published
2016-07-26
Title
WooCommerce Stock Manager < 1.0.9 - CSRF and Lack of Authorisation
Slug
woocommerce-stock-manager
Published
2021-06-14
Title
Woocommerce Stock Manager < 2.6.0 - CSRF to Arbitrary File Upload
Slug
woocommerce-stock-manager
Published
2023-06-15
Title
WooCommerce Stock Manager < 2.11.0 - Cross-Site Request Forgery
Slug
woocommerce-store-toolkit
Published
2016-02-08
Title
WooCommerce - Store Toolkit Plugin <= 1.5.6 - Privilege Escalation
Slug
woocommerce-store-toolkit
Published
2016-02-10
Title
Woocommerce Store Toolkit < 1.5.8 - Privilege Escalation
Slug
woocommerce-store-toolkit
Published
2022-01-10
Title
Store Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site Scripting
Slug
woocommerce-store-toolkit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-store-toolkit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-store-toolkit
Published
2025-07-15
Title
WooCommerce Store Toolkit < 2.4.4 - Unauthenticated Local File Inclusion
Slug
woocommerce-subscriptions
Published
2020-07-24
Title
WooCommerce Subscriptions < 2.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
woocommerce-subscriptions
Published
2020-04-02
Title
Woocommerce Subscriptions < 3.0.3 - CSRF to Cancel/Re-Activate Subscription
Slug
woocommerce-subscriptions
Published
2023-09-11
Title
WooCommerce Subscriptions < 4.6.0 - Subscription Suspension/Activation via CSRF
Slug
woocommerce-subscriptions
Published
2023-09-11
Title
WooCommerce Subscription < 4.6.0 - Cross-Site Request Forgery
Slug
woocommerce-subscriptions
Published
2024-01-17
Title
WooCommerce Subscriptions < 5.8.0 - Missing Authorization
Slug
woocommerce-superfaktura
Published
2024-02-23
Title
SuperFaktura WooCommerce < 1.40.4 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Slug
woocommerce-support-ticket-system
Published
2024-11-08
Title
WooCommerce Support Ticket System < 17.8 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-support-ticket-system
Published
2024-11-08
Title
WooCommerce Support Ticket System < 17.8 - Unauthenticated Arbitrary File Deletion
Slug
woocommerce-support-ticket-system
Published
2024-11-08
Title
WooCommerce Support Ticket System < 17.8 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
woocommerce-support-ticket-system
Published
2025-01-31
Title
WooCommerce Support Ticket System < 17.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure
Slug
woocommerce-to-google-merchant-center
Published
2025-04-09
Title
Woo Product Feed For Marketing Channels <= 1.9.0 - Missing Authorization
Slug
woocommerce-ultimate-gift-card
Published
2024-11-28
Title
WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates < 2.9.1 - Reflected Cross-Site Scripting
Slug
woocommerce-ultimate-gift-card
Published
2025-02-27
Title
WooCommerce Ultimate Gift Card < 2.9.3 - Unauthenticated Arbitrary File Upload