CVE-2025-32544 WordPress WooCommerce Loyal Customers plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in The Right Software WooCommerce Loyal Customers woocommerce-loyal-customer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce Loyal Customers: from n/a through = 2.6...

CVE-2025-32545

CVE-2025-32545 describes a CSRF to Reflected XSS vulnerability in the WordPress plugin for WooCommerce products without featured images (SOFTAGON). Affected version range is n/a through 0.1. The report attributes the issue to a cross-site request forgery flow that enables reflected JavaScript exe...

CVE-2025-32552 WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory MSRP RRP Pricing for WooCommerce msrp-for-woocommerce allows Reflected XSS.This issue affects MSRP RRP Pricing for WooCommerce: from n/a through = 1.8.1...

CVE-2025-32552 WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory MSRP RRP Pricing for WooCommerce allows Reflected XSS. This issue affects MSRP RRP Pricing for WooCommerce: from n/a through 1.8.1...

CVE-2025-32552

CVE-2025-32552 – Reflected Cross-Site Scripting in MSRP (RRP) Pricing for WooCommerce. Affected: MSRP (RRP) Pricing for WooCommerce

CVE-2025-32593 WordPress Add Product Frontend for WooCommerce plugin <= 1.0.8 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Bytes Technolab Add Product Frontend for WooCommerce add-product-frontend-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Product Frontend for WooCommerce: from n/a through = 1.0.8...

CVE-2025-32593

CVE-2025-32593 is a Missing Authorization vulnerability in the WordPress plugin Add Product Frontend for WooCommerce (affected: all versions up to 1.0.6) that allows unauthenticated arbitrary content deletion due to improperly configured access control. This CVE entry appears in multiple sources ...

CVE-2025-32611 WordPress WooCommerce TBC Credit Card Payment Gateway (Free) Plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in We Are De WooCommerce TBC Credit Card Payment Gateway Free allows Reflected XSS. This issue affects WooCommerce TBC Credit Card Payment Gateway Free: from n/a through 2.0.0...

CVE-2025-32611

CVE-2025-32611 is a reported Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WooCommerce TBC Credit Card Payment Gateway (Free) . The issue arises from improper neutralization of input during web page generation , enabling an attacker to craft a URL that, when visited b...

CVE-2025-32611 WordPress WooCommerce TBC Credit Card Payment Gateway (Free) Plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in We Are De WooCommerce TBC Credit Card Payment Gateway Free woo-tbc-payment-gateway allows Reflected XSS.This issue affects WooCommerce TBC Credit Card Payment Gateway Free: from n/a through = 2.0.0...

CVE-2025-32628 WordPress Crowdfunding for WooCommerce Plugin <= 3.1.12 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Wham Crowdfunding for WooCommerce allows Reflected XSS. This issue affects Crowdfunding for WooCommerce: from n/a through 3.1.12...

CVE-2025-32628

CVE-2025-32628 : Reflected Cross-Site Scripting in the WordPress plugin Crowdfunding for WooCommerce (up to version 3.1.12). Root cause: improper neutralization of user input during page generation. Impact: potential content manipulation and session/user data exposure for visitors; CVSSv3.1 base ...

CVE-2025-32674 WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Product Excel Import Export & Bulk Edit for WooCommerce webd-woocommerce-product-excel-importer-bulk-edit allows Reflected XSS.This issue affects Product Excel Import Export & Bulk Edit f...

CVE-2025-39559

CVE-2025-39559 : Missing Authorization in WordPress plugin Bring Fraktguiden for WooCommerce (versions

CVE-2025-39559 WordPress Bring Fraktguiden for WooCommerce plugin <= 1.11.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Eivin Landa Bring Fraktguiden for WooCommerce bring-fraktguiden-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bring Fraktguiden for WooCommerce: from n/a through = 1.11.4...

CVE-2025-39559 WordPress Bring Fraktguiden for WooCommerce plugin <= 1.11.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Eivin Landa Bring Fraktguiden for WooCommerce bring-fraktguiden-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bring Fraktguiden for WooCommerce: from n/a through = 1.11.4...

CVE-2025-39568

CVE-2025-39568 (StoreContrl Woocommerce) exposes an improper limitation of a pathname to a restricted directory (path traversal) that enables an unauthenticated arbitrary file download. Affected: StoreContrl Woocommerce versions n/a through 4.1.3. The vulnerability has been patched; remediation i...

CVE-2025-39568 WordPress StoreContrl Woocommerce plugin <= 4.1.3 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Arture B.V. StoreContrl Woocommerce storecontrl-wp-connection allows Path Traversal.This issue affects StoreContrl Woocommerce: from n/a through = 4.1.3...

CVE-2025-39568 WordPress StoreContrl Woocommerce <= 4.1.3 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Arture B.V. StoreContrl Woocommerce allows Path Traversal. This issue affects StoreContrl Woocommerce: from n/a through 4.1.3...

CVE-2025-39453 WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.9.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in algol.plus Advanced Dynamic Pricing for WooCommerce allows Cross Site Request Forgery. This issue affects Advanced Dynamic Pricing for WooCommerce: from n/a through 4.9.3...