EUVD-2026-96425

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0...

EUVD-2026-96512

Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency = 5.5.8 versions...

EUVD-2026-96450

Unauthenticated PHP Object Injection in Booster for WooCommerce = 8.4.0 versions...

EUVD-2026-96448

Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway = 4.8.2 versions...

EUVD-2026-96444

Unauthenticated Cross Site Scripting XSS in Food Menu – Restaurant Menu & Online Ordering for WooCommerce = 6.0.5 versions...

EUVD-2026-96537

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

EUVD-2026-96533

Unauthenticated Cross Site Scripting XSS in Additional Order Filters for WooCommerce = 1.24 versions...

EUVD-2026-96422

Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway = 1.7.2 versions...

EUVD-2026-96398

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9...

CVE-2026-103685

The VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce (woo-alidropship) plugin is affected by a Missing Authorization vulnerability. This issue allows for Exploiting Incorrectly Configured Access Control Security Levels in versions from n/a through 2.2.4 . The vulnerabi...

WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Je22y in WordPress Plugin ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce versions = 2.2.4...

CVE-2026-66480

The YITH WooCommerce Product Add-Ons WordPress plugin (versions ≤ 4.34.0 ) is affected by a Sensitive Data Exposure vulnerability (CWE-497). This flaw allows an attacker to retrieve embedded sensitive data from an unauthorized control sphere. While the specific root cause and impacted components ...

CVE-2026-107420

The Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin for WordPress versions

CVE-2026-62130

The WordPress WooCommerce Multilingual & Multicurrency plugin in versions

CVE-2026-42718

The Booster for WooCommerce WordPress plugin (versions

CVE-2026-42716

The Payever - WooCommerce Gateway plugin for WordPress (versions

CVE-2026-42709

The Food Menu – Restaurant Menu & Online Ordering for WooCommerce WordPress plugin, in versions

CVE-2026-40800

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress, versions

CVE-2026-39800

The Additional Order Filters for WooCommerce WordPress plugin (versions

CVE-2026-57806

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9...