PT-2025-3235 · Woocommerce · Hide Category By User Role For Woocommerce

Name of the Vulnerable Software and Affected Versions: Hide Category by User Role for WooCommerce versions n/a through 2.1.1 Description: The issue is related to a Missing Authorization vulnerability in the ThemeSupport Hide Category by User Role for WooCommerce plugin. This vulnerability affects...

WordPress plugin Custom Product Tabs for WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2025-1838 · Woomotiv · Live Sales Notification For Woocommerce – Woomotiv

Name of the Vulnerable Software and Affected Versions: Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress versions up to, and including, 3.6.1 Description: The issue is related to SQL Injection via the woomotiv seen products . cookie due to insufficient escaping on the...

WordPress plugin Allada T-shirt Designer for Woocommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin ELEX WooCommerce Advanced Bul...

PT-2025-1646 · WordPress · Store Credit / Gift Cards For Woocommerce

Name of the Vulnerable Software and Affected Versions: Store credit / Gift cards for woocommerce plugin for WordPress versions up to, and including, 1.0.49.46 Description: The issue is related to Reflected Cross-Site Scripting via the coupon, start date, and end date parameters due to insufficien...

WordPress plugin Bizapp for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...

PT-2025-1681 · Unknown +1 · Woocommerce-Warranty +1

Name of the Vulnerable Software and Affected Versions: SMS Alert Order Notifications – WooCommerce plugin for WordPress versions up to, and including, 3.7.6 Description: The issue concerns unauthorized modification of data that can lead to privilege escalation due to a missing capability check on...

WordPress Korea for WooCommerce plugin <= 1.1.11 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Mika in WordPress Plugin Korea for WooCommerce versions = 1.1.11...

Exploit for CVE-2025-22352

1️⃣ Component type WordPress plugin 2️⃣ Component details...

WordPress Advanced Dynamic Pricing for WooCommerce Plugin <= 4.9.0 -Reflected Cross Site Scripting (XSS) vulnerability

WordPress Advanced Dynamic Pricing for WooCommerce Plugin = 4.9.0 -Reflected Cross Site Scripting XSS vulnerability discovered by b4orvn in WordPress Plugin Advanced Dynamic Pricing for WooCommerce versions = 4.9.0...

CVE-2023-40327 WordPress Putler Connector for WooCommerce plugin <= 2.12.0 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in Putler / Storeapps Putler Connector for WooCommerce.This issue affects Putler Connector for WooCommerce: from n/a through 2.12.0...

CVE-2023-45101

Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Reviews for WooCommerce: from n/a through 5.36.0...

WordPress plugin Wishlist for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

CVE-2024-11842

The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-11842

The CVE-2024-11842 entry concerns the DN Shipping by Weight for WooCommerce WordPress plugin prior to version 1.2. The root cause is a missing CSRF check when updating plugin settings, enabling a CSRF attack to modify settings by a logged-in administrator. Impact described: settings changes could...

WordPress Barcode Generator for WooCommerce plugin <= 2.0.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Mika in WordPress Plugin Barcode Generator for WooCommerce versions = 2.0.2...

CVE-2024-12210

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcdnremoveshoplogo' AJAX action in all versions up to, and including, 5.4.0. This makes it possible for authenticated attackers, wit...

CVE-2024-12210 Print Invoice & Delivery Notes for WooCommerce <= 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Logo Deletion

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcdnremoveshoplogo' AJAX action in all versions up to, and including, 5.4.0. This makes it possible for authenticated attackers, wit...

WordPress plugin Print Invoice & Delivery Notes for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...