Woostify

woostify

Vulnerabilities:

3

Last Updated:

July 30, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-04-27
Title
Woostify < 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lity.js Library via data-lity Attribute in Custom HTML Block
Fixed in
Fixed in 2.5.1
CVSS
5.5 (medium)
Published
2025-09-26
Title
Woostify < 2.5.0 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.5.0
CVSS
4.4 (medium)
Published
2021-07-02
Title
Woostify < 1.9.2 - CSRF Bypass
Fixed in
Fixed in 1.9.2
CVSS
4.3 (medium)