WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-quick-product-editor
Published
2026-02-09
Title
WooCommerce Bulk Product Editor <= 3.0 - Missing Authorization
Slug
woocommerce-refund-and-exchange
Published
2025-07-17
Title
WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet < 3.2.7 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-role-pricing
Published
2025-04-04
Title
Woocommerce Role Pricing <= 3.5.6 - Cross-Site Request Forgery
Slug
woocommerce-sendinblue-newsletter-subscription
Published
2024-04-22
Title
Sendinblue for WooCommerce < 4.0.18 - Authenticated (Editor+) Arbitrary File Download and Deletion
Slug
woocommerce-sendinblue-newsletter-subscription
Published
2025-12-14
Title
Sendinblue for WooCommerce < 4.0.50 - Missing Authorization
Slug
woocommerce-sendinblue-newsletter-subscription
Published
2026-01-08
Title
Brevo for WooCommerce < 4.0.50 - Unauthenticated Stored Cross-Site Scripting
Slug
woocommerce-shipping-canada-post
Published
2023-11-14
Title
WooCommerce Canada Post Shipping < 2.8.4 - Cross-Site Request Forgery
Slug
woocommerce-shipping-canada-post
Published
2023-12-27
Title
WooCommerce Canada Post Shipping < 2.8.4 - Unauthenticated Unauthorised Action
Slug
woocommerce-shipping-gateway-per-product
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-shipping-gateway-per-product
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-shipping-multiple-addresses
Published
2023-05-15
Title
WooCommerce Ship to Multiple Addresses < 3.8.4 - Subscriber+ Shipping Address Disclosure via IDOR
Slug
woocommerce-shipping-multiple-addresses
Published
2023-07-17
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Cross-Site Request Forgery
Slug
woocommerce-shipping-multiple-addresses
Published
2023-06-26
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Billing Address Update via CSRF
Slug
woocommerce-shipping-multiple-addresses
Published
2023-07-10
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Customer+ Shipping Address Update
Slug
woocommerce-shipping-multiple-addresses
Published
2023-07-10
Title
WooCommerce Ship to Multiple Addresses < 3.8.6 - Reflected Cross-Site Scripting
Slug
woocommerce-shipping-multiple-addresses
Published
2022-10-05
Title
WooCommerce Ship to Multiple Addresses < 3.7.2 - Reflected Cross-Site Scripting
Slug
woocommerce-shipping-multiple-addresses
Published
2022-10-05
Title
WooCommerce Ship to Multiple Addresses < 3.7.2 - Address Creation/Update/Deletion via CSRF
Slug
woocommerce-shipping-multiple-addresses
Published
2023-12-27
Title
WooCommerce Ship to Multiple Addresses < 3.8.10 - Missing Authorization
Slug
woocommerce-shipping-per-product
Published
2023-12-27
Title
WooCommerce Shipping Per Product < 2.5.5 - Missing Authorization
Slug
woocommerce-simple-registration
Published
2024-04-15
Title
Simple Registration for WooCommerce < 1.5.7 - Unauthenticated Privilege Escalation
Slug
woocommerce-simple-registration
Published
2025-10-24
Title
Simple Registration for WooCommerce < 1.5.9 - Cross-Site Request Forgery to Privilege Escalation via Role Request Approval
Slug
woocommerce-smart-coupons
Published
2020-03-04
Title
WooCommerce Smart Coupons < 4.6.5 - Unauthenticated Coupon Creation
Slug
woocommerce-social-media-share-buttons
Published
2024-03-29
Title
Woocommerce Social Media Share Buttons <= 1.3.0 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
woocommerce-square
Published
2026-01-09
Title
WooCommerce Square < 5.1.2 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id
Slug
woocommerce-stock-manager
Published
2016-07-26
Title
WooCommerce Stock Manager < 1.0.9 - CSRF and Lack of Authorisation