WordPress WooCommerce <3.1.2 - Arbitrary Function Call

WordPress WooCommerce plugin before 3.1.2 does not have authorisation and CSRF checks in the wptadminupdatenoticeoption AJAX action available to both unauthenticated and authenticated users, as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary...

Custom Product Tabs for WooCommerce < 1.7.8 - Unauthenticated Toggle Content Setting Update

YIKES Inc. Custom Product Tabs for WooCommerce plugin \u003C= 1.7.7 contains a broken access control caused by improper permission checks in &yikes-the-content-toggle option update, letting attackers modify content without authorization. id: CVE-2022-28666 info: name: Custom Product Tabs for...

WooCommerce Checkout Field Manager < 18.0 - Arbitrary File Upload

The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server. id: CVE-2022-4328 info: name: WooCommerce Checkout Field Manager 18.0 - Arbitrary File Uploa...

Ubigeo de Peru < 3.6.4 - SQL Injection

The plugin does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections. id: CVE-2022-0814 info: name: Ubigeo de Peru 3.6.4 - SQL Injection author: r3Y3r53...

WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read

WordPress MultiSafepay for WooCommerce plugin through 4.13.1 contains an arbitrary file read vulnerability. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-33901 info:...

WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection

WordPress TI WooCommerce Wishlist plugin before 1.40.1 contains a SQL injection vulnerability. The plugin does not sanitize and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint. id: CVE-2022-0412 info: name: WordPress TI WooCommerce...

YITH WooCommerce Ajax Search <= 2.4.0 - Cross-Site Scripting

The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'queryString' parameter in the REST API endpoint /ywcas/v1/register in versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. id: CVE-2024-4455 info...

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation

Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture = 2.0.3.1 contains a broken access control vulnerability caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions. id: CVE-2026-27542 info: name: WooCommerce Wholesale Le...

WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting

A cross-site scripting vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter. id: CVE-2014-4558 info: name: WooCommerce Swipe = 2.7.1 - Cross-Site...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8（严重） 📝 描述 适用于 WordPress 的 WooCommerce Designer Pro 插件（广泛使用，尤其是在 Pricom - Printing Company & Design Services 等主题中）由于在 wcdpsavecanvasdesignajax 函数中缺乏正确的文件类型验证，所有版本（包括 1.9.26 及更早版本）均存在 任意文件上传 漏洞。 这可能导致未经认证的攻击者将 任何文件类型...

CVE-2025-15260

CVE-2025-15260：插件 MyRewards – WooCommerce 忠诚度积分与奖励中的授权缺失/访问控制失效 免责声明： 本仓库仅用于教育目的及负责任的披露 。该漏洞已向厂商报告并获得修复。请勿利用此信息在未经授权的情况下攻击系统。 摘要 在 WooCommerce 的 MyRewards（WooRewards） 插件（版本 mSource-write$data; 业务影响 经济损失： 通过操纵“订单金额”积分倍数，攻击者可生成无限奖励积分，并将其兑换为高价值折扣券或免费商品，绕过电商支付网关。 权限提升： 普通客户（订阅者）可执行插件管理操作。 数据完整性受损：...

CVE-2025-5058

eMagicOne Store Manager for WooCommerce Warning: Trying to access array offset on false in /home/vagrant/research/Lab1/wp-content/plugins/store-manager-connector/classes/class-emosmcwoocommerceoverrider.php on line 324 Warning: Trying to access array offset on false in...

CVE-2025-4603

eMagicOne Store Manager for WooCommerce = 1.2.5 - 未认证的任意文件删除 eMagicOne Store Manager for WooCommerce 插件暴露了一个远程管理协议端点（?connector=bridge），允许在服务器上执行文件删除操作。该认证机制依赖于一组默认凭据（login=1、password=1）和会话密钥系统。如果默认凭据未更改，攻击者可以轻松完成认证、获取会话密钥，并从 WordPress 根目录或任何可访问的目录中删除任意文件。 复现 提供了一个 POC CVE-2025-4603.py，用于演示攻击者删除...

CVE-2025-4602

eMagicOne Store Manager for WooCommerce = 1.2.5 - 未经认证的任意文件读取 eMagicOne Store Manager for WooCommerce 插件暴露了一个远程管理协议端点（?connector=bridge），允许在服务器上执行文件删除操作。其认证机制依赖于一组默认凭据（login=1，password=1）和会话密钥系统。如果默认凭据未被更改，攻击者可以轻易地进行认证，获取会话密钥，并从 WordPress 根目录或任何可访问的目录读取任意文件。 复现 提供了一个 POC CVE-2025-4602.py 来演示从服务器读...

CVE-2025-4336

eMagicOne Store Manager for WooCommerce 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2:...

CVE-2026-13152

CVE-2026-13152：Custom Fields Account Registration For WooCommerce 1.4 中的未认证权限提升漏洞 -blue.svg 📖 公告概述 CVE-2026-13152 是一个影响 Custom Fields Account Registration For WooCommerce WordPress 插件（1.4 版本之前）的未认证权限提升漏洞，由安全研究员 Huynh Kien...

CVE-2026-3891

🚀 CVE-2026-3891 – Pix for WooCommerce 未认证文件上传远程代码执行（RCE） CVE-2026-3891 的概念验证（PoC）漏洞利用程序 – 在 Pix for WooCommerce WordPress 插件（≤ 1.5.0）中，未认证的任意文件上传可导致远程代码执行。 📖 概述 CVE-2026-3891 是 Pix for WooCommerce 插件中的一个严重漏洞，影响所有版本直至 1.5.0 。该插件未能在其 AJAX 处理器 lknpixforwoocommercec6savesettings...

Hippoo-Mobile-App-For-WooCommerce-CVE-Report

Hippoo-Mobile-App-for-WooCommerce-CVE-Report CVE-2025-13339 漏洞披露 CVE-2025-13339 - Hippoo Mobile App for WooCommerce 中的漏洞 本仓库披露了在 Hippoo Mobile App for WooCommerce = 1.6.1 中发现的一个漏洞，该插件是 hippooo 开发的 WordPress 插件。 🛠 受影响版本 产品 : Hippoo Mobile App for WooCommerce 版本 : v1.6.1 URL :...

WP-CVE-2023-28121

WP-CVE-2023-28121 WooCommerce Payments 5.6.2 - 未认证权限提升 Python 2.7 请我喝咖啡： 比特币 $：14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC 如何使用？ 安装 Python 2.7 在此下载 python file.py 参考：https://wpscan.com/vulnerability/0f78a245-866c-462e-bd23-43dfadb57072/...