PT-2026-107396

The Integration for Epos Now and WooCommerce WordPress plugin before 4.11.2 does not perform an authorization check on one of its REST endpoints, allowing unauthenticated users to retrieve the site's scheduled background tasks and their arguments, which include order identifiers and, when...

PT-2026-107477

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Piggly Dev Pix por Piggly para Woocommerce pix-por-piggly allows Blind SQL Injection.This issue affects Pix por Piggly para Woocommerce: from n/a through 2.1.2...

CVE-Wordpress

CVE-2026-49777, CVE-2026-10735 ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come ad esempio: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate Ambienti di test di penetrazione autorizzati Esempio di configurazione e utilizzo:...

CVE-2026-42635

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

CVE-2026-42637

Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-39794

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API = 1.6.3 versions...

CVE-2026-39762

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1...

CVE-2026-39758

Unauthenticated Cross Site Scripting XSS in Midtrans-WooCommerce = 2.32.3 versions...

CVE-2026-39751

Unauthenticated Broken Access Control in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-39750

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-32580

Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...

CVE-2026-32578

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...

CVE-2026-32568

Subscriber Remote Code Execution RCE in WooCommerce Designer Pro = 1.9.33 versions...

CVE-2026-32557

Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...

EUVD-2026-93059

Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-42637 WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability

Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-42637 WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability

Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-42637

The PayPlug for WooCommerce (Official) WordPress plugin versions

EUVD-2026-93057

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

CVE-2026-42635 WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...