WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce
Published
2026-10-08
Title
WooCommerce 9.8.0 - 11.1.2 - Shop Manager+ Privilege Escalation
Slug
woocommerce-2checkout-payment
Published
2024-04-15
Title
2Checkout Payment Gateway for WooCommerce <= 6.2 - Missing Authorization via sniff_ins
Slug
woocommerce-abandon-cart-pro
Published
2025-06-09
Title
Abandoned Cart Pro for WooCommerce < 9.17.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
woocommerce-abandon-cart-pro
Published
2026-06-19
Title
Abandoned Cart Pro for WooCommerce < 10.4.1 - Subscriber+ Privilege Escalation
Slug
woocommerce-abandon-cart-pro
Published
2026-08-20
Title
Abandoned Cart Pro for WooCommerce <= 10.4.0 - Unauthenticated Privilege Escalation
Slug
woocommerce-abandon-cart-pro
Published
2026-09-04
Title
Abandoned Cart Pro for WooCommerce < 10.7.2 - Subscriber+ Privilege Escalation
Slug
woocommerce-abandon-cart-pro
Published
2026-10-13
Title
Abandoned Cart Pro for WooCommerce < 10.8.1 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value
Slug
woocommerce-abandon-cart-pro
Published
2026-10-13
Title
Abandoned Cart Pro for WooCommerce < 10.8.1 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter
Slug
woocommerce-abandon-cart-pro
Published
2026-10-13
Title
Abandoned Cart Pro for WooCommerce < 10.8.1 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter
Slug
woocommerce-abandoned-cart
Published
2015-07-15
Title
Abandoned Cart Lite for WooCommerce < 1.9 - Authenticated Blind SQL Injection
Slug
woocommerce-abandoned-cart
Published
2019-03-11
Title
Abandoned Cart Lite for WooCommerce < 5.2.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
woocommerce-abandoned-cart
Published
2020-11-08
Title
Abandoned Cart Lite for WooCommerce < 5.8.3 - Unauthenticated SQL Injection
Slug
woocommerce-abandoned-cart
Published
2021-03-01
Title
Multiple Plugins - CSRF Nonce Bypasses
Slug
woocommerce-abandoned-cart
Published
2023-06-06
Title
Abandoned Cart Lite for WooCommerce < 5.15.0 - Authentication Bypass
Slug
woocommerce-abandoned-cart
Published
2023-10-16
Title
Abandoned Cart Lite for WooCommerce < 5.16.0 - Admin+ Stored XSS
Slug
woocommerce-abandoned-cart
Published
2023-11-28
Title
Abandoned Cart Lite for WooCommerce < 5.16.2 - Missing Authorization via multiple AJAX functions
Slug
woocommerce-abandoned-cart
Published
2023-11-21
Title
Abandoned Cart Lite for WooCommerce < 5.16.1 - Improper Authorization via wcal_preview_emails
Slug
woocommerce-abandoned-cart
Published
2023-11-21
Title
Abandoned Cart Lite for WooCommerce < 5.16.1 - Improper Authorization via wcal_delete_expired_used_coupon_code
Slug
woocommerce-abandoned-cart
Published
2023-12-01
Title
Abandoned Cart Lite for WooCommerce < 5.16.2 - Multiple CSRF
Slug
woocommerce-abandoned-cart
Published
2026-06-25
Title
Abandoned Cart Lite for WooCommerce < 6.8.2 - Unauthenticated Account Takeover via Malleable Recovery-Link Token
Slug
woocommerce-abandoned-cart
Published
2026-06-26
Title
Abandoned Cart Lite for WooCommerce < 6.8.1 - Cross-Site Request Forgery
Slug
woocommerce-abandoned-cart
Published
2026-07-24
Title
Abandoned Cart Lite for WooCommerce < 6.8.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Slug
woocommerce-abandoned-cart-pro
Published
2019-03-11
Title
Abandoned Cart Lite for WooCommerce < 5.2.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
woocommerce-add-to-cart-custom-redirect
Published
2024-03-07
Title
WooCommerce Add to Cart Custom Redirect < 1.2.14 - Authenticated(Contributor+) Missing Authorization to Limited Arbitrary Options Update
Slug
woocommerce-admin
Published
2021-09-22
Title
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Analytics Report Leaks