PT-2026-103159

Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce = 2.1.2 versions...

PT-2026-103197

Unauthenticated Cross Site Scripting XSS in YITH WooCommerce Ajax Search = 2.28.0 versions...

PT-2026-103201

Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...

PT-2026-103212

Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...

PT-2026-103202

Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...

PT-2026-103208

Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce = 5.120.0 versions...

PT-2026-103180

Contributor Cross Site Scripting XSS in Pixel Manager for WooCommerce = 1.69.0 versions...

PT-2026-103161

Shop manager PHP Object Injection in Cost of Goods for WooCommerce = 3.5.2 versions...

PT-2026-103158

Shop manager PHP Object Injection in Music Player for WooCommerce = 1.9.1 versions...

PT-2026-103490

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...

WordPress WPML Multilingual & Multicurrency for WooCommerce plugin <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection vulnerability

Authenticated Shop Manager+ SQL Injection vulnerability discovered by Muni Nitish Kumar Yaddala Stranger825 in WordPress Plugin WooCommerce Multilingual & Multicurrency versions = 5.5.7...

PT-2026-103199

Unauthenticated Cross Site Scripting XSS in WooCommerce Product Table Lite = 5.6.7 versions...

PT-2026-103222

Unauthenticated Cross Site Request Forgery CSRF in Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification = 2.3.1 versions...

CVE-2026-102392: Deserialization of Untrusted Data

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...

WordPress Music Player for WooCommerce plugin <= 1.9.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Music Player for WooCommerce versions = 1.9.1...

WordPress Blacklist Manager plugin 1.3.0-2.3.1 - Blocked User Restriction Bypass vulnerability

Blocked User Restriction Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification versions 1.3.0-2.3.1...

WordPress Request a Quote for WooCommerce plugin <= 2.9.2 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by t4g0 in WordPress Plugin Request a Quote for WooCommerce versions = 2.9.2...

WordPress Minimum and Maximum Quantity for WooCommerce plugin <= 2.1.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Minimum and Maximum Quantity for WooCommerce versions = 2.1.2...

WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Aydan Arabadzha in WordPress Plugin MakeCommerce for WooCommerce versions = 4.1.0...

WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Seongwon LEE in WordPress Plugin YITH WooCommerce Tab Manager versions = 2.15.0...