WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-paypal-payments
Published
2023-06-20
Title
WooCommerce PayPal Payments < 2.0.5 - Merchant ID Details Update via CSRF
Slug
woocommerce-paypal-payments
Published
2026-05-22
Title
WooCommerce PayPal Payments < 4.0.2 - Unauthenticated Order Manipulation and Sensitive Information Disclosure
Slug
woocommerce-payplug
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-payplug
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-payu-paisa
Published
2019-08-25
Title
WooCommerce PayU India <= 2.1.1 - Price Tampering
Slug
woocommerce-pdf-invoices-packing-slips
Published
2017-02-10
Title
Woocommerce PDF Invoices Packing Slips < 2.0.13 - XSS
Slug
woocommerce-pdf-invoices-packing-slips
Published
2021-12-06
Title
WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2022-06-14
Title
WooCommerce PDF Invoices & Packing Slips < 2.15.0 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2022-06-20
Title
WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2022-08-03
Title
WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-01-12
Title
PDF Invoices & Packing Slips for WooCommerce < 3.7.6 - Shop Manager+ SQL Injection
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-04-24
Title
PDF Invoices & Packing Slips for WooCommerce < 3.8.1 - Unauthenticated Stored Cross-Site Scripting
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-04-24
Title
PDF Invoices & Packing Slips for WooCommerce < 3.8.1 - Unauthenticated Server-Side Request Forgery
Slug
woocommerce-pdf-invoices-packing-slips
Published
2024-10-24
Title
WooCommerce PDF Invoices & Packing Slips < 3.8.7 - Missing Authorization
Slug
woocommerce-pdf-invoices-packing-slips
Published
2025-12-07
Title
WooCommerce PDF Invoices & Packing Slips < 5.0.0 - Missing Authorization
Slug
woocommerce-pdf-invoices-packing-slips
Published
2026-02-17
Title
PDF Invoices & Packing Slips for WooCommerce < 5.7.0 - Missing Authorization to Authenticated (Subscriber+) Peppol Identifier Modification
Slug
woocommerce-pdf-invoices-packing-slips
Published
2026-04-20
Title
PDF Invoices & Packing Slips for WooCommerce < 5.9.0 - Authenticated (Shop manager+) PHP Object Injection
Slug
woocommerce-pdf-invoices-packing-slips
Published
2026-07-10
Title
PDF Invoices & Packing Slips for WooCommerce < 5.15.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode Attribute
Slug
woocommerce-pdf-vouchers
Published
2024-07-23
Title
WooCommerce - PDF Vouchers < 4.9.4 - Authentication Bypass to Voucher Vendor
Slug
woocommerce-pdf-vouchers
Published
2024-08-01
Title
WooCommerce PDF Vouchers < 4.9.5 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-vouchers
Published
2024-08-01
Title
WooCommerce PDF Vouchers < 4.9.5 - Unauthenticated Arbitrary File Deletion
Slug
woocommerce-pdf-vouchers
Published
2024-08-01
Title
WooCommerce PDF Vouchers < 4.9.5 - Missing Authorization
Slug
woocommerce-pdf-vouchers
Published
2024-12-19
Title
WooCommerce PDF Vouchers < 4.9.9 - Reflected Cross-Site Scripting
Slug
woocommerce-pdf-vouchers
Published
2024-12-11
Title
WooCommerce PDF Vouchers < 4.9.9 - Authentication Bypass
Slug
woocommerce-photo-reviews
Published
2024-09-10
Title
WooCommerce Photo Reviews Premium < 1.3.14 - Authentication Bypass to Account Takeover and Privilege Escalation