WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-bulk-order-form
Published
2023-05-31
Title
Quick/Bulk Order Form for WooCommerce < 3.6.0 - Shop Manager+ Stored XSS
Slug
woocommerce-bulk-stock-management
Published
2023-06-20
Title
WooCommerce Bulk Stock Management < 2.2.34 - Reflected XSS
Slug
woocommerce-call-for-price
Published
2026-05-01
Title
Call for Price for WooCommerce < 4.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Call for Price' Label Settings
Slug
woocommerce-catalog-enquiry
Published
2017-04-20
Title
WooCommerce Catalog Enquiry - Arbitrary File Upload
Slug
woocommerce-catalog-enquiry
Published
2023-11-21
Title
Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update
Slug
woocommerce-catalog-enquiry
Published
2023-11-03
Title
Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Inquiry Saving & Sensitive Information Disclosure
Slug
woocommerce-catalog-enquiry
Published
2024-02-20
Title
Product Catalog Enquiry for WooCommerce by MultiVendorX < 5.0.6 - Cross-Site Request Forgery via REST API
Slug
woocommerce-catalog-enquiry
Published
2026-09-07
Title
CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce < 6.1.6 - Unauthenticated Privilege Escalation
Slug
woocommerce-catalog-enquiry
Published
2026-08-31
Title
CatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared Transient
Slug
woocommerce-chained-products
Published
2023-01-04
Title
WooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no'
Slug
woocommerce-check-pincode-zipcode-for-shipping
Published
2025-01-08
Title
Woocommerce check pincode/zipcode for shipping <= 2.0.4 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
woocommerce-checkout-cielo
Published
2024-06-03
Title
Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update
Slug
woocommerce-checkout-field-editor
Published
2023-09-11
Title
Checkout Field Editor < 1.7.5 - Checkout Fields Update via CSRF
Slug
woocommerce-checkout-field-editor
Published
2023-09-11
Title
Checkout Field Editor (Premium) < 1.7.5 - Cross-Site Request Forgery
Slug
woocommerce-checkout-field-editor
Published
2023-09-11
Title
Checkout Field Editor < 1.7.5 - Cross-Site Request Forgery to Checkout Fields Update
Slug
woocommerce-checkout-field-editor-pro
Published
2024-06-03
Title
Checkout Field Editor for WooCommerce (Pro) < 3.6.3 - Unauthenticated Arbitrary File Deletion
Slug
woocommerce-checkout-field-editor-pro
Published
2026-07-24
Title
Checkout Field Editor for WooCommerce (Pro) < 3.7.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter
Slug
woocommerce-checkout-manager
Published
2019-04-25
Title
WooCommerce Checkout Manager < 4.3 - Arbitrary File Upload
Slug
woocommerce-checkout-manager
Published
2022-06-14
Title
Checkout Fields Manager for WooCommerce < 5.5.7 - Reflected Cross-Site Scripting
Slug
woocommerce-checkout-manager
Published
2023-11-09
Title
WooCommerce Checkout Manager < 7.3.1 - Missing Authorization
Slug
woocommerce-checkout-manager
Published
2026-02-18
Title
Checkout Field Manager (Checkout Manager) for WooCommerce < 7.8.2 - Unauthenticated Limited File Upload
Slug
woocommerce-checkout-manager
Published
2026-02-18
Title
Checkout Field Manager (Checkout Manager) for WooCommerce < 7.8.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
Slug
woocommerce-checkout-manager
Published
2026-09-17
Title
Checkout Field Manager < 7.9.7 - Subscriber+ Arbitrary Attachment Deletion via Unvalidated Attachment ID Reparenting
Slug
woocommerce-checkout-manager
Published
2026-09-17
Title
Checkout Field Manager < 7.9.7 - Subscriber+ Arbitrary Attachment Deletion via Customer Address Custom Field
Slug
woocommerce-checkout-manager
Published
2026-10-14
Title
Checkout Field Manager (Checkout Manager) for WooCommerce < 7.9.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID