CVE-2025-47526

CVE-2025-47526 concerns the WordPress plugin GS Variation Swatches for WooCommerce (versions up to 3.0.4). The issue is described as a Missing Authorization vulnerability, arising from incorrectly configured access control, which could allow an attacker to exploit insufficient authorization check...

CVE-2025-47526 WordPress GS Variation Swatches for WooCommerce plugin <= 3.0.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in GS Plugins GS Variation Swatches for WooCommerce gs-woo-variation-swatches allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Variation Swatches for WooCommerce: from n/a through = 3.0.4...

CVE-2025-47526 WordPress GS Variation Swatches for WooCommerce <= 3.0.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in GS Plugins GS Variation Swatches for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GS Variation Swatches for WooCommerce: from n/a through 3.0.4...

CVE-2025-47505 WordPress Product Time Countdown for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ProWCPlugins Product Time Countdown for WooCommerce product-countdown-for-woocommerce allows Stored XSS.This issue affects Product Time Countdown for WooCommerce: from n/a through = 1.6.2...

CVE-2025-47505 WordPress Product Time Countdown for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ProWCPlugins Product Time Countdown for WooCommerce product-countdown-for-woocommerce allows Stored XSS.This issue affects Product Time Countdown for WooCommerce: from n/a through = 1.6.2...

CVE-2025-47505

CVE-2025-47505 is a Stored XSS in the WordPress plugin Product Time Countdown for WooCommerce (versions up to and including 1.6.2). Root cause: Improper neutralization of input during web page generation leading to stored cross-site scripting. Impact per sources: attacker with limited privileges ...

CVE-2025-47504

CVE-2025-47504 documents a stored XSS in two WordPress WooCommerce plugins: Custom Checkout Fields for WooCommerce (affected &lt;=1.8.3) and Email Verification for WooCommerce (affected

CVE-2025-47504 WordPress Custom Checkout Fields for WooCommerce plugin <= 1.8.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Custom Checkout Fields for WooCommerce custom-checkout-fields-for-woocommerce allows Stored XSS.This issue affects Custom Checkout Fields for WooCommerce: from n/a through = 1.8.3...

CVE-2025-47473 WordPress PW WooCommerce Bulk Edit <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in pimwick PW WooCommerce Bulk Edit allows Cross Site Request Forgery. This issue affects PW WooCommerce Bulk Edit: from n/a through 2.134...

CVE-2025-47473

CVE-2025-47473 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin PW WooCommerce Bulk Edit (PW WooCommerce Bulk Edit). Affected versions are up to 2.134 (from n/a through 2.134). The CVSS base score is 5.4 (Medium), with attack vector Network, attack complexity Lo...

CVE-2025-47473 WordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in pimwick PW WooCommerce Bulk Edit pw-bulk-edit allows Cross Site Request Forgery.This issue affects PW WooCommerce Bulk Edit: from n/a through = 2.134...

CVE-2025-47472 WordPress Music Player for WooCommerce <= 1.5.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in codepeople Music Player for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Music Player for WooCommerce: from n/a through 1.5.1...

CVE-2025-47472

CVE-2025-47472 affects the Music Player for WooCommerce plugin (WordPress) up to version 1.5.1. Root cause: Missing/broken authorization allowing improper access control; CVSS 3.1 base score 5.4 (Network, Low privileges required, no user interaction). Public details in the initial document indica...

CVE-2025-47460 WordPress TrackShip for WooCommerce <= 1.9.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TrackShip TrackShip for WooCommerce allows SQL Injection. This issue affects TrackShip for WooCommerce: from n/a through 1.9.1...

CVE-2025-47460 WordPress TrackShip for WooCommerce plugin <= 1.9.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TrackShip TrackShip for WooCommerce trackship-for-woocommerce allows SQL Injection.This issue affects TrackShip for WooCommerce: from n/a through = 1.9.1...

CVE-2025-47460

CVE-2025-47460 concerns TrackShip for WooCommerce. The vulnerability is an SQL Injection arising from improper neutralization of special elements in TrackShip for WooCommerce versions 1.9.1 and earlier. Connected sources corroborate this, including NVD/CVE records and Patchstack entries, which id...

CVE-2025-47455

CVE-2025-47455 describes an Open Redirect vulnerability in the WordPress plugin Integration for WooCommerce and Salesforce (CRM Perks Integrations) affecting versions up to 1.7.5. The issue enables phishing via redirection to untrusted sites. Connected sources confirm the affected software and th...

CVE-2025-47455 WordPress Integration for WooCommerce and Salesforce plugin <= 1.7.5 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Salesforce woo-salesforce-plugin-crm-perks allows Phishing.This issue affects Integration for WooCommerce and Salesforce: from n/a through = 1.7.5...

CVE-2025-47451 WordPress Product Quantity Dropdown For Woocommerce plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in silverplugins217 Product Quantity Dropdown For Woocommerce product-quantity-dropdown-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Quantity Dropdown For Woocommerce: from n/a through = 1.2...

CVE-2025-47451

CVE-2025-47451 is a CSRF vulnerability in the WordPress plugin Product Quantity Dropdown For Woocommerce (silverplugins217), affecting versions from n/a through 1.2. The CVE entry, corroborated by Patchstack and multiple databases, states the issue enables Cross Site Request Forgery to change set...