EUVD-2026-95591

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Reflected XSS.This issue affects FiboSearch: from n/a through 1.34.1...

By-Poloss..-..CVE-2026-10580

CVE-2026-10580: Hippoo Mobile App per WooCommerce = 1.9.4 - Bypass dell'autenticazione non autenticata per compromissione admin Non autenticato → Compromissione account amministratore tramite bug di confluenza logica 📌 Riepilogo | ---|--- CVE| CVE-2026-10580 Plugin| Hippoo Mobile App per...

CVE-2026-86850

The SKU Error Fixer for WooCommerce WordPress plugin through 1.0 does not perform any capability or nonce checks on two of its AJAX actions, which are also available to unauthenticated users, allowing them to permanently delete product variations it classifies as obsolete, and to disclose those...

EUVD-2026-95503

The SKU Error Fixer for WooCommerce WordPress plugin through 1.0 does not perform any capability or nonce checks on two of its AJAX actions, which are also available to unauthenticated users, allowing them to permanently delete product variations it classifies as obsolete, and to disclose those...

CVE-2026-86850 SKU Error Fixer for WooCommerce <= 1.0 - Unauthenticated Orphaned Product Variation Deletion

The SKU Error Fixer for WooCommerce WordPress plugin through 1.0 does not perform any capability or nonce checks on two of its AJAX actions, which are also available to unauthenticated users, allowing them to permanently delete product variations it classifies as obsolete, and to disclose those...

CVE-2026-86850

The SKU Error Fixer for WooCommerce WordPress plugin (versions through 1.0 ) is vulnerable to unauthenticated orphaned product variation deletion. The root cause is a lack of capability or nonce checks on two AJAX actions accessible to unauthenticated users. This flaw allows attackers to disclose...

CVE-2024-11423

CVE-2024-11423 Ultimate Gift Cards per WooCommerce = 3.0.6 - Autorizzazione mancante al glitch di denaro infinito Descrizione Il plugin Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule Gift...

CVE-2025-15260

CVE-2025-15260: Autorizzazione Mancante / Controllo di Accesso Interrotto nel Plugin - MyRewards – Loyalty Points and Rewards for WooCommerce Disclaimer: Questo repository è creato solo per scopi educativi e divulgazione etica. La vulnerabilità è stata segnalata responsabilmente al fornitore e...

PT-2026-108838

Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n...

PT-2026-108840

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Reflected XSS.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through 3.4.1...

PT-2026-108868

The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing key used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid signature and mark arbitrary...

PT-2026-108828

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.0...

PT-2026-108861

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Reflected XSS.This issue affects FiboSearch: from n/a through 1.34.1...

PT-2026-108841

Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17...

PT-2026-108884

Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects Product Configurator for WooCommerce: from n/a through 1.7.5...

PT-2026-108845

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...

CVE-2021-32789

💣 CVE-2021-32789 Exploit di dump degli utenti di Wordpress WooCommerce Dump utente admin woo -u http://example.com Dump di tutti gli utenti woo -u http://example.com -dump...

CVE-2026-19089-WooCommerce-Tyche

CVE-2026-19089 Product Input Fields for WooCommerce 2.0.2 – unauthentifizierter beliebiger Datei-Upload Das Plugin Product Input Fields for WooCommerce von Tyche Softwares validiert hochgeladene Dateitypen nicht, wenn die Einstellung für akzeptierte Typen des Feldes leer bleibt die eigene...

hdwebmobile-photo-video-reviews

HDWebmobile Foto- & Video-Bewertungen Ein WooCommerce-Plugin, das Kunden ermöglicht, Fotos und kurze Videos an ihre Produktbewertungen anzuhängen, die direkt in der Bewertungsliste auf der Produktseite angezeigt werden. WordPress.org: https://wordpress.org/plugins/hdwebmobile-photo-video-reviews/...

CVE-2026-27541-Analysis-Lab

CVE-2026-27541 — WooCommerce Wholesale Prices Authentifizierte Privilegienausweitung Labor Überblick Dieses Projekt ist ein lokales Docker-Labor zur Analyse und Reproduktion des Verhaltens von CVE-2026-27541 im WooCommerce Wholesale Prices / Wholesale Suite -Plugin, indem verwundbare und gepatcht...