WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-products-filter
Published
2024-08-07
Title
HUSKY < 1.3.6.2 - Authenticated (Shop Manager+) Arbitrary Options Update
Slug
woocommerce-products-filter
Published
2024-09-24
Title
HUSKY – Products Filter Professional for WooCommerce < 1.3.6.2 - Insecure Direct Object Reference to Unsubscribe
Slug
woocommerce-products-filter
Published
2024-11-19
Title
HUSKY – Products Filter for WooCommerce < 1.3.6.4 - Reflected Cross-Site Scripting via really_curr_tax Parameter
Slug
woocommerce-products-filter
Published
2025-03-10
Title
HUSKY < 1.3.6.6 - Unauthenticated Local File Inclusion
Slug
woocommerce-products-filter
Published
2025-03-14
Title
HUSKY < 1.3.6.5 - Subscriber+ Local File Inclusion
Slug
woocommerce-products-filter
Published
2025-06-19
Title
HUSKY < 1.3.7.1 - Contributor+ Local File Inclusion
Slug
woocommerce-products-filter
Published
2025-10-27
Title
HUSKY < 1.3.7.2 - Unauthenticated SQL Injection via `phrase` Parameter
Slug
woocommerce-products-filter
Published
2025-12-03
Title
HUSKY – Products Filter Professional for WooCommerce < 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query'
Slug
woocommerce-products-filter
Published
2025-12-17
Title
HUSKY – Products Filter Professional for WooCommerce < 1.3.7.4 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'
Slug
woocommerce-products-slider
Published
2021-05-06
Title
PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)
Slug
woocommerce-products-slider
Published
2023-01-23
Title
PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS
Slug
woocommerce-products-slider
Published
2024-09-12
Title
Product Slider for WooCommerce < 1.13.51 - Reflected Cross-Site Scripting
Slug
woocommerce-products-without-featured-images
Published
2025-04-14
Title
WooCommerce Products without featured images <= 0.1 - Cross-Site Request Forgery
Slug
woocommerce-quick-product-editor
Published
2026-02-09
Title
WooCommerce Bulk Product Editor <= 3.0 - Missing Authorization
Slug
woocommerce-refund-and-exchange
Published
2025-07-17
Title
WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet < 3.2.7 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-role-pricing
Published
2025-04-04
Title
Woocommerce Role Pricing <= 3.5.6 - Cross-Site Request Forgery
Slug
woocommerce-sendinblue-newsletter-subscription
Published
2024-04-22
Title
Sendinblue for WooCommerce < 4.0.18 - Authenticated (Editor+) Arbitrary File Download and Deletion
Slug
woocommerce-sendinblue-newsletter-subscription
Published
2025-12-14
Title
Sendinblue for WooCommerce < 4.0.50 - Missing Authorization
Slug
woocommerce-sendinblue-newsletter-subscription
Published
2026-01-08
Title
Brevo for WooCommerce < 4.0.50 - Unauthenticated Stored Cross-Site Scripting
Slug
woocommerce-shipping-canada-post
Published
2023-11-14
Title
WooCommerce Canada Post Shipping < 2.8.4 - Cross-Site Request Forgery
Slug
woocommerce-shipping-canada-post
Published
2023-12-27
Title
WooCommerce Canada Post Shipping < 2.8.4 - Unauthenticated Unauthorised Action
Slug
woocommerce-shipping-gateway-per-product
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-shipping-gateway-per-product
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-shipping-multiple-addresses
Published
2023-05-15
Title
WooCommerce Ship to Multiple Addresses < 3.8.4 - Subscriber+ Shipping Address Disclosure via IDOR
Slug
woocommerce-shipping-multiple-addresses
Published
2023-07-17
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Cross-Site Request Forgery