CVE-2025-57914

Cross-Site Request Forgery CSRF vulnerability in Matat Technologies Deliver via Shipos for WooCommerce wc-shipos-delivery allows Cross Site Request Forgery.This issue affects Deliver via Shipos for WooCommerce: from n/a through = 3.0.2...

CVE-2025-57905

Cross-Site Request Forgery CSRF vulnerability in Amin Y AgreeMe Checkboxes For WooCommerce agreeme-checkboxes-for-woocommerce allows Cross Site Request Forgery.This issue affects AgreeMe Checkboxes For WooCommerce: from n/a through = 1.1.3...

CVE-2025-57904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP-EXPERTS.IN Sales Count Manager for WooCommerce wc-sales-count-manager allows Stored XSS.This issue affects Sales Count Manager for WooCommerce: from n/a through = 2.6...

CVE-2025-57908

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ProWCPlugins Product Time Countdown for WooCommerce product-countdown-for-woocommerce allows Stored XSS.This issue affects Product Time Countdown for WooCommerce: from n/a through = 1.6.5...

CVE-2025-57903

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSuperiors Developer WooCommerce Additional Fees On Checkout Free woo-additional-fees-on-checkout-wordpress allows Stored XSS.This issue affects WooCommerce Additional Fees On Checkout Free: from...

CVE-2025-53455

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CashBill CashBill.pl – Płatności WooCommerce cashbill-payment-method allows Stored XSS.This issue affects CashBill.pl – Płatności WooCommerce: from n/a through = 3.2.1...

WordPress WPB Quick View for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Prissy in WordPress Plugin WPB Quick View for WooCommerce versions = 2.1.8...

WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Helpdesk Support Ticket System for WooCommerce versions = 2.1.1...

WordPress Flexible PDF Invoices for WooCommerce & WordPress Plugin <= 6.0.13 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by theviper17 in WordPress Plugin Flexible PDF Invoices for WooCommerce & WordPress versions = 6.0.13...

WordPress Quick View for WooCommerce Plugin <= 2.2.16 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy in WordPress Plugin Quick View for WooCommerce versions = 2.2.16...

WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by PARIMAL NA in WordPress Plugin TI WooCommerce Wishlist versions = 2.10.0...

WordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Legion Hunter in WordPress Plugin Estonian Shipping Methods for WooCommerce versions = 1.7.2...

WordPress Cecabank WooCommerce plugin plugin <= 0.3.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Cecabank WooCommerce Plugin versions = 0.3.4...

WordPress Perfect Brands for WooCommerce plugin <= 3.6.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Perfect Brands for WooCommerce versions = 3.6.2...

WordPress Payrexx Payment Gateway for WooCommerce Plugin <= 3.1.5 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Legion Hunter in WordPress Plugin Payrexx Payment Gateway for WooCommerce versions = 3.1.5...

WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Upsell Order Bump Offer for WooCommerce versions = 3.0.7...

CVE-2025-59559

CVE-2025-59559 involves the Payrexx Payment Gateway for WooCommerce with Missing Authorization in versions up to 3.1.5 (range: n/a through 3.1.5). The CVSS 3.1 base score is 4.3 (Network, Low privileges required, UI NONE, Scope UNCHANGED). The initial description does not provide exploit details ...

CVE-2025-59559 WordPress Payrexx Payment Gateway for WooCommerce Plugin <= 3.1.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in payrexx Payrexx Payment Gateway for WooCommerce woo-payrexx-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payrexx Payment Gateway for WooCommerce: from n/a through = 3.1.5...

CVE-2025-59559 WordPress Payrexx Payment Gateway for WooCommerce Plugin <= 3.1.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in payrexx Payrexx Payment Gateway for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Payrexx Payment Gateway for WooCommerce: from n/a through 3.1.5...

CVE-2025-59565

CVE-2025-59565 is a Stored XSS in the Upsell Order Bump Offer for WooCommerce WordPress plugin affecting versions up to 3.0.7. Root cause: improper input neutralization during web page generation. Impact: attacker-supplied script stored on vulnerable sites; Wordfence notes patch status as Patched...