CVE-2025-4212

The CVE-2025-4212 entry affects the WordPress plugin Checkout Files Upload for WooCommerce . It is vulnerable to Stored Cross-Site Scripting (Stored XSS) via file uploads in all versions up to and including 2.2.1 due to insufficient input sanitization and output escaping. This allows unauthentica...

CVE-2025-4212 Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting

The Checkout Files Upload for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2025-4212 Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting

The Checkout Files Upload for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2025-13088

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

CVE-2025-13088

The CVE-2025-13088 relates to the WordPress plugin Category and Product Woocommerce Tabs. Multiple connected sources confirm a Local File Inclusion in the categoryProductTab() function caused by insufficient validation of the template parameter, affecting all versions up to 1.0. The vulnerability...

CVE-2025-13088 Category and Product Woocommerce Tabs <= 1.0 - Authenticated (Contributor+) Local File Inclusion

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

CVE-2025-13088 Category and Product Woocommerce Tabs <= 1.0 - Authenticated (Contributor+) Local File Inclusion

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

CVE-2025-12411 Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Authenticated (Subscriber+) SQL Injection

The Premmerce Wholesale Pricing for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'ID' parameter in versions up to, and including, 1.1.10. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2025-12411

CVE-2025-12411 affects the Premmerce Wholesale Pricing for WooCommerce plugin (WordPress). It is an authenticated SQL Injection via the ID parameter in versions

CVE-2025-12411 Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Authenticated (Subscriber+) SQL Injection

The Premmerce Wholesale Pricing for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'ID' parameter in versions up to, and including, 1.1.10. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

EUVD-2025-197950

The Premmerce Wholesale Pricing for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'ID' parameter in versions up to, and including, 1.1.10. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

WordPress Pixel Manager for WooCommerce plugin <= 1.49.2 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Pixel Manager for WooCommerce versions = 1.49.2...

WordPress Live sales notification for WooCommerce plugin <= 2.3.39 - Missing Authorization to Unauthenticated Customer Data Exposure vulnerability

Missing Authorization to Unauthenticated Customer Data Exposure vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Live sales notification for WooCommerce versions = 2.3.39...

WordPress Cryptocurrency Payment Gateway for WooCommerce plugin <= 2.0.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Cryptocurrency Payment Gateway for WooCommerce versions = 2.0.25...

WordPress plugin Category and Product Woocommerce Tabs 安全漏洞

WordPress Category and Product Woocommerce Tabs plugin is a plugin for WordPress websites, the main function is to add custom tabs Tabs to WooCommerce product pages to organize and display product information, categories and other content. A file inclusion vulnerability exists in the WordPress...

PT-2025-47318

Name of the Vulnerable Software and Affected Versions Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more plugin for WordPress versions prior to 1.49.3 Description The software contains a flaw that allows unauthenticated attackers to extract data from...

WordPress Booster for WooCommerce Plugin Missing Authorization Vulnerability

WordPress Booster for WooCommerce Plugin is a multi-functional plugin designed specifically for the WooCommerce e-commerce platform, offering more than 100 features including PDF invoices, product variants, wish lists, and other tools designed to streamline e-commerce operations and enhance user...

PT-2025-47266

Name of the Vulnerable Software and Affected Versions Woocommerce Tabs plugin for WordPress versions prior to 1.1 Description The Category and Product Woocommerce Tabs plugin for WordPress is susceptible to Local File Inclusion due to inadequate input validation on the template parameter within t...

WordPress WooCommerce PDF Invoice Builder plugin missing license vulnerability

WordPress WooCommerce PDF Invoice Builder plugin is designed for WooCommerce e-commerce platform invoice and packing slip generation tool, support customized templates, multi-language, conditional generation and other features, to help merchants create professional documents in line with the bran...

WordPress plugin Checkout Files Upload for WooCommerce 跨站脚本漏洞

WordPress Checkout Files Upload for WooCommerce plugin is a plugin designed for the WordPress platform that allows users to upload files on the checkout page, often used to collect order-related documents or customization information. The WordPress Checkout Files Upload for WooCommerce plugin...