Storeapps vulnerabilities

Products

• Smart Manager 4
• Affiliate For Woocommerce 2
• Affiliate For Woocommerce (wordpress Plugin) 2
• News Announcement Scroll 2
• Stock Manager For Woocommerce 2
• Stock Manager For Woocommerce 2

Newest

• storeapps smart manager – woocommerce bulk edit: products, orders, users & more (spreadsheet) Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter CVE-2026-18443 8.8 HighOctober 3, 2026
• storeapps smart manager WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-57704 7.1 HighJuly 23, 2026
• storeapps smart manager WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability CVE-2026-45216 8.8 HighMay 25, 2026
• storeapps stock manager for woocommerce WordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-24365 5.4 MediumJanuary 22, 2026
• storeapps smart manager WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability CVE-2025-22710 Public exploit 7.6 HighJanuary 21, 2025
• storeapps smart manager WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerability CVE-2024-49687 4.3 MediumDecember 31, 2024
• storeapps news announcement scroll News Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2023-5663 8.8 HighMarch 13, 2024
• storeapps smart manager Smart Manager < 8.28.0 - Admin+ SQL Injection CVE-2024-0566 Public exploit 7.2 HighFebruary 12, 2024
• storeapps stock manager for woocommerce WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-35091 4.3 MediumJuly 11, 2023
• storeapps news announcement scroll, news announcement scroll (wordpress plugin) +1 more WordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability CVE-2022-40694 4.8 MediumNovember 17, 2022
• storeapps affiliate for woocommerce, affiliate for woocommerce (wordpress plugin) +1 more WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change CVE-2022-36284 6.4 MediumAugust 5, 2022
• storeapps affiliate for woocommerce, affiliate for woocommerce (wordpress plugin) +1 more WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities CVE-2022-25649 5.0 MediumAugust 5, 2022
• storeapps temporary login without password Temporary Login Without Password < 1.7.1 - Subscriber+ Plugin's Settings Update CVE-2021-24836 4.3 MediumDecember 13, 2021
• storeapps woocommerce stock manager, stock manager for woocommerce +1 more Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin CVE-2021-34619 8.8 HighJuly 21, 2021