CVE-2026-91019

The Event Booking Manager for WooCommerce WordPress plugin before 5.6.0 contains a broken access control flaw: it does not restrict who can view its stored payment gateway configuration . As a result, any authenticated user with Contributor-level access or above can read the site's PayPal and Str...

CVE-2026-91009

The Active Woot Products Tables for WooCommerce WordPress plugin, versions before 2.1.3 , lacks proper authorization and CSRF validation on certain AJAX actions. The CVELIST record identifies the specific vector as the woot_update_attachment action. Any authenticated user at the subscriber level ...

CVE-2026-91008

Event Booking Manager for WooCommerce WordPress plugin before 5.3.8 fails to perform an ownership or authorization check before rendering booking confirmation details. This allows unauthenticated attackers to retrieve registered attendees' personal information—including full name, email address, ...

CVE-2025-11391

PPOM for WooCommerce prefix . PPOMTABLEMETA . " WHERE productmetaid = $metaid"; $res = $wpdb-getrow $qry ; return $res; 未认证的攻击者可以通过构造恶意载荷并将其注入到向购物车添加商品时的 ppomfieldsid 参数中来利用此漏洞。这允许攻击者执行任意 SQL 命令，例如时间延迟函数（SLEEP），从而能够确认漏洞的存在，并可能逐字符地从数据库中窃取敏感信息。 当插件设置中的 “启用旧版价格计算”...

CVE-2026-3891

Pix for WooCommerce --command --timeout --useragent 交互式 Shel...

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Descripción CVE-2026-3891 es una vulnerabilidad crítica de Subida Arbitraria de Archivos no Autenticada encontrada en el plugin de WordPress Pix for WooCommerce en versiones hasta la 1.5.0 inclusive. La vulnerabilidad existe en la funcionalidad...

CVE-2026-47100-Analysis-Lab

CVE-2026-47100 — FunnelKit / Funnel Builder for WooCommerce Checkout 存储型XSS实验室 本地 Docker 实验室，用于以安全、最低危害方式重现 CVE-2026-47100。 该实验室对比了存在漏洞的 FunnelKit 版本与已修复版本，并通过无害的 JavaScript 标记/弹窗来验证行为。 1. 概述 CVE-2026-47100 是 Funnel Builder / FunnelKit for WooCommerce Checkout 在 3.15.0.3 版本之前存在的一个授权缺失漏洞。 存在漏洞的结账...

CVE-2026-3891-Linux

root@kitploit: ███████╗██████╗ ██╗███████╗███╗ ██╗██████╗ ███████╗ ██╔════╝██╔══██╗██║██╔════╝████╗ ██║██╔══██╗██╔════╝ █████╗ ██████╔╝██║█████╗ ██╔██╗ ██║██║ ██║███████╗ ██╔══╝ ██╔══██╗██║██╔══╝ ██║╚██╗██║██║ ██║╚════██║ ██║ ██║ ██║██║███████╗██║ ╚████║██████╔╝███████║ ╚═╝ ╚═╝ ╚═╝╚═╝╚══════╝╚═╝...

WordPress Pricing Deals for WooCommerce <=2.0.2.02 - SQL Injection

WordPress Pricing Deals for WooCommerce plugin through 2.0.2.02 contains a SQL injection vulnerability. The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or...

VidShop for WooCommerce <= 1.1.4 - SQL Injection

VidShop – Shoppable Videos for WooCommerce plugin for WordPress = 1.1.4 contains a time-based SQL injection caused by insufficient escaping of the 'fields' parameter, letting unauthenticated attackers extract sensitive database information. id: CVE-2026-0702 info: name: VidShop for WooCommerce =...

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

CVE-2026-87860

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making...

CVE-2026-87854

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting one of its REST endpoints, allowing unauthenticated users to retrieve the store's full list of subscriptions, including customer usernames, product names, recurring amounts and...

EUVD-2026-80209

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making...

EUVD-2026-80208

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting one of its REST endpoints, allowing unauthenticated users to retrieve the store's full list of subscriptions, including customer usernames, product names, recurring amounts and...

CVE-2025-11391

PPOM for WooCommerce prefix . PPOMTABLEMETA . " WHERE productmetaid = $metaid"; $res = $wpdb-getrow $qry ; return $res;...

CVE-2026-84023

BEAR – Bulk Editor and Products Manager Professional for WooCommerce , a WordPress plugin, is affected in versions before 1.2.2 . The vulnerability stems from the plugin's failure to verify a CSRF nonce or check user capabilities before allowing updates to taxonomy terms. An attacker can modify a...

CVE-2024-50510

CVE-2024-50510 AR For Woocommerce = 6.2 - 未经身份验证的任意文件上传 描述 WordPress 的 AR for WooCommerce 插件在所有版本（包括 6.2）中由于缺少文件类型验证，容易受到任意文件上传攻击。这使得未经身份验证的攻击者可以在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。 详细信息 类型 : plugin 标识符 : ar-for-woocommerce 受影响版本 : 6.2 CVSS 分数 : 9.8 CVSS 评级 : 严重 CVSS 向量 :...

CVE-2026-3891

🚀 CVE-2026-3891 – Pix for WooCommerce 未认证文件上传远程代码执行（RCE） CVE-2026-3891 的概念验证（PoC）漏洞利用程序 – 在 Pix for WooCommerce WordPress 插件（≤ 1.5.0）中，未认证的任意文件上传可导致远程代码执行。 📖 概述 CVE-2026-3891 是 Pix for WooCommerce 插件中的一个严重漏洞，影响所有版本直至 1.5.0 。该插件未能在其 AJAX 处理器 lknpixforwoocommercec6savesettings...

CVE-2026-82215

The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel...