WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-photo-reviews
Published
2025-06-03
Title
WooCommerce Photo Reviews - Review Reminders - Review for Discounts <= 1.3.13 - Reflected Cross-Site Scripting
Slug
woocommerce-photo-reviews
Published
2025-08-27
Title
WooCommerce Photo Reviews <= 1.4.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
woocommerce-pos
Published
2024-03-19
Title
WooCommerce POS < 1.4.12 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure
Slug
woocommerce-pos
Published
2025-05-16
Title
WooCommerce POS < 1.7.9 - Missing Authorization
Slug
woocommerce-pos
Published
2026-06-15
Title
WCPOS – Point of Sale (POS) plugin for WooCommerce < 1.9.0 - Missing Authorization
Slug
woocommerce-pre-orders
Published
2023-06-21
Title
WooCommerce Pre-Orders < 2.0.1 - Contributor+ Stored XSS
Slug
woocommerce-pre-orders
Published
2023-06-26
Title
WooCommerce Pre-Orders < 2.0.2 - Reflected XSS
Slug
woocommerce-pre-orders
Published
2023-07-10
Title
WooCommerce Pre-Orders < 2.0.3 - Unauthorised Actions via CSRF
Slug
woocommerce-pre-orders
Published
2023-07-10
Title
WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF
Slug
woocommerce-pre-orders
Published
2023-05-15
Title
WooCommerce Pre-Orders < 2.0.0 - Reflected XSS
Slug
woocommerce-predictive-search
Published
2014-08-01
Title
WooCommerce Predictive Search - index.php rs Parameter XSS
Slug
woocommerce-predictive-search
Published
2024-07-10
Title
WooCommerce Predictive Search < 6.1.0 - Reflected Cross-Site Scripting
Slug
woocommerce-product-addon
Published
2016-09-19
Title
WooCommerce Product Addons < 2.0 - Arbitrary File Upload
Slug
woocommerce-product-addon
Published
2019-08-10
Title
PPOM for WooCommerce <= 18.3 - Authenticated Stored XSS
Slug
woocommerce-product-addon
Published
2022-01-17
Title
PPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSS
Slug
woocommerce-product-addon
Published
2023-04-24
Title
Product Addons & Fields for WooCommerce < 32.0.6 - Admin+ Stored Cross-Site Scripting
Slug
woocommerce-product-addon
Published
2023-05-01
Title
Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting
Slug
woocommerce-product-addon
Published
2024-04-25
Title
Product Addons & Fields for WooCommerce < 32.0.19 - Unauthenticated Arbitrary File Upload via ppom_upload_file
Slug
woocommerce-product-addon
Published
2024-06-06
Title
PPOM for WooCommerce < 32.0.21 - Unauthenticated Content Injection Vulnerability
Slug
woocommerce-product-addon
Published
2025-01-24
Title
PPOM for WooCommerce < 33.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
woocommerce-product-addon
Published
2025-10-17
Title
PPOM – Product Addons & Custom Fields for WooCommerce < 33.0.16 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-product-addon
Published
2025-10-17
Title
PPOM – Product Addons & Custom Fields for WooCommerce < 33.0.16 - Unauthenticated SQL Injection
Slug
woocommerce-product-addon
Published
2025-11-17
Title
PPOM for WooCommerce < 33.0.17 - Missing Authorization
Slug
woocommerce-product-addon
Published
2026-06-25
Title
PPOM – Product Addons & Custom Fields for WooCommerce < 34.0.0 - Missing Authorization
Slug
woocommerce-product-addons
Published
2023-05-15
Title
WooCommerce Product Add-ons < 6.2.0 - Cross-Site Request Forgery