WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-delivery-notes
Published
2025-12-23
Title
Print Invoice & Delivery Notes for WooCommerce < 5.9.0 - Unauthenticated Remote Code Execution
Slug
woocommerce-delivery-notes
Published
2026-02-03
Title
Print Invoice & Delivery Notes for WooCommerce < 5.9.0 - Missing Authorization
Slug
woocommerce-delivery-notes
Published
2026-03-18
Title
Print Invoice & Delivery Notes for WooCommerce < 6.0.0 - Missing Authorization
Slug
woocommerce-delivery-notes
Published
2026-06-25
Title
Print Invoice & Delivery Notes for WooCommerce < 7.1.2 - Unauthenticated Information Exposure
Slug
woocommerce-digital-content-delivery-with-drm-flickrocket
Published
2025-01-06
Title
WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket < 4.76 - Reflected Cross-Site Scripting
Slug
woocommerce-digital-signature
Published
2026-06-10
Title
Digital Signature Add-on for WooCommerce < 2.0.1 - Unauthenticated Information Exposure
Slug
woocommerce-discounts-plus
Published
2021-10-12
Title
Discounts Manager for Products < 3.4.5 - Reflected Cross-Site Scripting
Slug
woocommerce-display-products-by-tags
Published
2025-02-24
Title
WooCommerce Display Products by Tags <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woocommerce-dropshipping
Published
2022-10-17
Title
WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
Slug
woocommerce-dropshipping
Published
2024-06-06
Title
WooCommerce Dropshipping <= 5.1.2 - Unauthenticated Arbitrary Email Send
Slug
woocommerce-dropshipping
Published
2026-06-08
Title
WooCommerce Dropshipping Premium < 5.2.5 - Missing Authorization
Slug
woocommerce-ean-payment-gateway
Published
2023-09-13
Title
WooCommerce EAN Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) EAN Update
Slug
woocommerce-easy-booking-system
Published
2026-07-13
Title
Easy Booking < 3.5.0 - Unauthenticated Minimum Booking Duration Bypass
Slug
woocommerce-email-customizer
Published
2026-10-14
Title
Email Customizer for WooCommerce (Pro) < 3.9.6 - Subscriber+ RCE via 'template' Parameter
Slug
woocommerce-email-inquiry-cart-options
Published
2026-01-26
Title
Email Inquiry & Cart Options for WooCommerce <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woocommerce-email-test
Published
2016-12-08
Title
WooCommerce Email Test 1.5 - Order Information Disclosure
Slug
woocommerce-es
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-es
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-eu-vat-assistant
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-eu-vat-assistant
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-eu-vat-assistant
Published
2026-10-16
Title
EU VAT Assistant for WooCommerce < 2.2.0 - Unauthenticated Stored Cross-Site Scripting via 'vat_number' Parameter
Slug
woocommerce-eu-vat-compliance
Published
2026-10-16
Title
European VAT Compliance Assistant for WooCommerce < 1.36.11 - Unauthenticated Stored Cross-Site Scripting via CF-IPCountry Header
Slug
woocommerce-exporter
Published
2014-10-11
Title
WooCommerce Store Exporter 1.7.5 - Cross Site Scripting (XSS)
Slug
woocommerce-exporter
Published
2016-02-10
Title
Woocommerce Exporter < 1.8.4 - Privilege Esclation
Slug
woocommerce-exporter
Published
2020-01-09
Title
WooCommerce - Store Exporter < 2.4 - CSV Injection