WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woocommerce-subscriptions
Published
2023-09-11
Title
WooCommerce Subscriptions < 4.6.0 - Subscription Suspension/Activation via CSRF
Slug
woocommerce-subscriptions
Published
2023-09-11
Title
WooCommerce Subscription < 4.6.0 - Cross-Site Request Forgery
Slug
woocommerce-subscriptions
Published
2024-01-17
Title
WooCommerce Subscriptions < 5.8.0 - Missing Authorization
Slug
woocommerce-subscriptions
Published
2026-08-10
Title
WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection
Slug
woocommerce-subscriptions
Published
2026-08-10
Title
WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection
Slug
woocommerce-subscriptions
Published
2026-08-10
Title
WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection
Slug
woocommerce-superfaktura
Published
2024-02-23
Title
SuperFaktura WooCommerce < 1.40.4 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Slug
woocommerce-support-ticket-system
Published
2024-11-08
Title
WooCommerce Support Ticket System < 17.8 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-support-ticket-system
Published
2024-11-08
Title
WooCommerce Support Ticket System < 17.8 - Unauthenticated Arbitrary File Deletion
Slug
woocommerce-support-ticket-system
Published
2024-11-08
Title
WooCommerce Support Ticket System < 17.8 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
woocommerce-support-ticket-system
Published
2025-01-31
Title
WooCommerce Support Ticket System < 17.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure
Slug
woocommerce-support-ticket-system
Published
2026-03-20
Title
WooCommerce Support Ticket System < 18.5 - Unauthenticated Arbitrary File Deletion
Slug
woocommerce-tax-exempt-plugin
Published
2026-06-29
Title
Tax Exempt for WooCommerce <= 1.9.3 - Authenticated (Customer+) Path Traversal
Slug
woocommerce-tm-extra-checkout-options-addon
Published
2026-07-28
Title
Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) < 2.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload in eco_save_settings
Slug
woocommerce-tm-extra-product-options
Published
2026-08-14
Title
Extra Product Options & Add-Ons for WooCommerce < 7.6 - Unauthenticated Arbitrary File Download
Slug
woocommerce-to-google-merchant-center
Published
2025-04-09
Title
Woo Product Feed For Marketing Channels <= 1.9.0 - Missing Authorization
Slug
woocommerce-ultimate-gift-card
Published
2024-11-28
Title
WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates < 2.9.1 - Reflected Cross-Site Scripting
Slug
woocommerce-ultimate-gift-card
Published
2025-02-27
Title
WooCommerce Ultimate Gift Card < 2.9.3 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-ultimate-gift-card
Published
2025-06-03
Title
WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates < 2.9.7 - Unauthenticated SQL Injection
Slug
woocommerce-ultimate-points-and-rewards
Published
2025-11-09
Title
WooCommerce Ultimate Points And Rewards < 2.10.3 - Authenticated (Subscriber+) Information Exposure
Slug
woocommerce-upcoming-product
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
woocommerce-upcoming-product
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
woocommerce-upload-files
Published
2021-03-04
Title
WooCommerce Upload Files < 59.4 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-upload-files
Published
2024-11-12
Title
WooCommerce Upload Files < 84.4 - Unauthenticated Arbitrary File Upload
Slug
woocommerce-user-switching
Published
2026-07-10
Title
Customer Switching for WooCommerce < 2.1.3 - Customer+ Privilege Escalation to Administrator via Insecure Operator Resolution