CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - Caricamento Arbitrario di File Non Autenticato Descrizione Il plugin WooCommerce Designer Pro per WordPress, utilizzato dal tema WordPress Pricom - Printing Company & Design Services, è vulnerabile a caricamenti arbitrari di file a causa della...

CVE-2025-2907

CVE-2025-2907 Exploit Details Veröffentlicht : 2025-04-04 Aktualisiert : 2025-03-28 Schweregrad : Kritisch CVSS-Score: 9.8 CWE : CWE-862: CWE-862 Fehlende Autorisierung Betroffene Versionen : Alle Versionen von n/a bis 12.3.1 Forscher :...

CVE-2026-32554

WooBeWoo Product Filter Pro (WordPress plugin) versions up to and including 3.1.8 are affected by an unauthenticated SQL injection vulnerability, rated CVSS 9.3 (CRITICAL) by Patchstack. The vulnerability is exploitable over the network with low complexity and no user interaction required, with a...

CVE-2026-10104-POC

CVE-2026-10104: Cross-Site Scripting Armazenado em Product Video Gallery para WooCommerce Resumo...

CVE-2024-54262

CVE-2024-54262 Import Export For WooCommerce = 1.5 - Upload Arbitrário de Arquivo Autenticado Assinante+ Descrição O plugin Import Export For WooCommerce para WordPress é vulnerável a uploads arbitrários de arquivos devido à falta de validação de tipo de arquivo em todas as versões até, e...

CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Caricamento arbitrario di file non autenticato Descrizione: Il plugin Woocommerce Product Design per WordPress è vulnerabile al caricamento arbitrario di file a causa della mancanza di validazione del tipo di file in tutte le versioni fino alla...

CVE-2025-2266

🚨 CVE-2025-2266 — Exploit del plugin WordPress 🔍 Riepilogo della vulnerabilità Il plugin Checkout Mestres do WP for WooCommerce per WordPress è affetto da una vulnerabilità di aggiornamento arbitrario delle opzioni senza autenticazione nelle versioni 8.6.5 fino a 8.7.5. La funzione vulnerabile...

CVE-2026-32477

Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...

CVE-2026-32558

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

CVE-2026-28171

Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...

EUVD-2026-64804

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

CVE-2026-32558 WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

CVE-2026-32558

Affiliate Pro – Affiliate Program for WooCommerce & WordPress , a WordPress plugin, is affected by an unauthenticated privilege escalation vulnerability in versions 8.9.1 and below . An attacker over the network can escalate privileges without prior authentication or user interaction, resulting i...

EUVD-2026-64801

Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...

CVE-2026-32477 WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin <= 2.2.0 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...

CVE-2026-32477

CVE-2026-32477 is an unauthenticated arbitrary file deletion vulnerability in the WordPress plugin ShopBuilder Pro – Elementor WooCommerce Builder Addons in versions 2.2.0 and earlier . An attacker can delete arbitrary files over the network without authentication or user interaction, leading to ...

CVE-2026-28171 WordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...

CVE-2026-28171

CVE-2026-28171 is an unauthenticated arbitrary file deletion vulnerability in the WooCommerce File Approval WordPress plugin, affecting versions 10.7 and earlier . An unauthenticated remote attacker can delete arbitrary files on the server, leading to a high availability impact with changed scope...

EUVD-2026-64797

Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...

WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.5.1 - Path Traversal vulnerability

Path Traversal vulnerability discovered by D01EXPLOIT OFFICIAL in WordPress Plugin Printcart Web to Print Product Designer for WooCommerce versions = 2.5.1...