CVE-2025-30950 WordPress All Currencies for WooCommerce plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Wham All Currencies for WooCommerce woocommerce-all-currencies allows Stored XSS.This issue affects All Currencies for WooCommerce: from n/a through = 2.4.3...

CVE-2025-31000 WordPress Payment QR WooCommerce plugin <= 1.1.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Miguel Fuentes Payment QR WooCommerce payment-qr-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment QR WooCommerce: from n/a through = 1.1.6...

CVE-2025-31000 WordPress Payment QR WooCommerce plugin <= 1.1.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Miguel Fuentes Payment QR WooCommerce payment-qr-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment QR WooCommerce: from n/a through = 1.1.6...

CVE-2025-31000

CVE-2025-31000 is a Missing Authorization vulnerability in the Payment QR WooCommerce plugin for WordPress (affected: 1.0.0 to 1.1.6). Exploitation details in the provided docs indicate network-based access with no user interaction and no confidentiality impact, but no public patch is listed here...

CVE-2025-49320

CVE-2025-49320 affects FraudLabs Pro for WooCommerce (FraudLabs Pro for WooCommerce) with a Missing Authorization issue due to incorrectly configured access control. Vulnerable versions are FraudLabs Pro for WooCommerce up to 2.22.11. The advisory notes a MEDIUM severity (CVSS 3.1 base 5.3) and i...

CVE-2025-49320 WordPress FraudLabs Pro for WooCommerce plugin <= 2.22.11 - Broken Access Control Vulnerability

Missing Authorization vulnerability in fraudlabspro FraudLabs Pro for WooCommerce fraudlabs-pro-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FraudLabs Pro for WooCommerce: from n/a through = 2.22.11...

CVE-2025-49320 WordPress FraudLabs Pro for WooCommerce <= 2.22.11 - Broken Access Control Vulnerability

Missing Authorization vulnerability in fraudlabspro FraudLabs Pro for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FraudLabs Pro for WooCommerce: from n/a through 2.22.11...

CVE-2025-49315

CVE-2025-49315 affects Persian Woocommerce SMS (Persian Script plugin) and is an SQL Injection due to improper neutralization of inputs in SQL commands. Affected versions range up to 7.0.10; exploitation would involve untrusted input influencing a SQL query. The Wordfence vulnerability listing in...

CVE-2025-49315 WordPress Persian Woocommerce SMS <= 7.0.10 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PersianScript Persian Woocommerce SMS allows SQL Injection. This issue affects Persian Woocommerce SMS: from n/a through 7.0.10...

CVE-2025-49315 WordPress Persian Woocommerce SMS plugin <= 7.0.10 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows SQL Injection.This issue affects Persian Woocommerce SMS: from n/a through = 7.0.10...

CVE-2025-49287 WordPress Product Feed for WooCommerce plugin <= 2.2.8 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed for WooCommerce: from n/a through = 2.2.8...

CVE-2025-49287

CVE-2025-49287 : A Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce affects Product Feed for WooCommerce (Google Shopping Feed, Pinterest Feed, TikTok Ads & More) up to version 2.2.8. The CVSSv3.1 base score is 4.3 (Medium); attack vector is network, with low attack c...

CVE-2025-49287 WordPress Product Feed for WooCommerce plugin <= 2.2.8 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed for WooCommerce: from n/a through = 2.2.8...

CVE-2025-49239 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.5.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Cross Site Request Forgery.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through = 5.5.0...

CVE-2025-49239

CVE-2025-49239 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Print Invoice & Delivery Notes for WooCommerce ≤ 5.5.0. The issue affects the plugin’s ability to perform actions without proper user interaction, enabling unauthorized requests via CSRF. The CVSSv3...

CVE-2025-49239 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.5.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Cross Site Request Forgery.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through = 5.5.0...

PT-2025-24195 · Woocommerce · Miguel Fuentes Payment Qr Woocommerce

Name of the Vulnerable Software and Affected Versions: Miguel Fuentes Payment QR WooCommerce versions 1.1.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

PT-2025-24131 · Woocommerce · Subscription Renewal Reminders For Woocommerce

Name of the Vulnerable Software and Affected Versions: Subscription Renewal Reminders for WooCommerce versions 1.3.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into...

PT-2025-24242 · WordPress · Persian Woocommerce Sms

Name of the Vulnerable Software and Affected Versions: Persian Woocommerce SMS versions 7.0.10 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-24202 · Woocommerce · Print Invoice & Delivery Notes For Woocommerce

Name of the Vulnerable Software and Affected Versions: Print Invoice & Delivery Notes for WooCommerce versions 5.5.0 and earlier Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed. This can lead to security breaches where an attacker can trick a user...