Skip to content
Unknown Woocommerce vulnerabilities
-
realmag777 active woot products tables for woocommerce. 100% free
Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'help_title' Shortcode Attribute
CVE-2026-120579
6.4 Medium
-
unknown komfortkasse for woocommerce
Komfortkasse for WooCommerce < 1.4.9 - Administrator Account Creation via CSRF
CVE-2026-122001
8.8 High
-
realmag777 active woot products tables for woocommerce. 100% free
Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Unauthenticated File Deletion via 'wp_columns_actions' and 'table_id' Parameters
CVE-2026-120560
6.5 Medium
-
unknown shopengine gutenberg woocommerce builder blocks addon
Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_css
CVE-2026-92396
6.8 Medium
-
unknown security for woocommerce
Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user
CVE-2026-100109
Public exploit
9.8 Critical
-
unknown dokan: ai powered woocommerce multivendor marketplace solution
Dokan < 5.3.3 - Admin+ Cross-Site Vendor Activation
CVE-2026-107775
2.7 Low
-
unknown dokan: ai powered woocommerce multivendor marketplace solution
Dokan < 5.3.3 - Unauthenticated Email Sender Spoofing via Store Contact Form
CVE-2026-107774
5.3 Medium
-
unknown dokan: ai powered woocommerce multivendor marketplace solution
Dokan < 5.3.3 - Unauthenticated Order PII Disclosure and Note Manipulation via Orders REST Endpoint
CVE-2026-107773
6.5 Medium
-
unknown yith woocommerce gift cards, yith woocommerce gift cards +1 more
YITH WooCommerce Gift Cards < 4.38.1 - Unauthenticated Gift Card Balance Double-Spending via Race Condition
CVE-2026-88814
3.7 Low
-
unknown subscriptions for woocommerce
Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass
CVE-2026-87856
5.3 Medium
-
unknown erp: complete hr, accounting & crm suite built for woocommerce
WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit Log
CVE-2026-105191
4.3 Medium
-
mollie payments for woocommerce, unknown mollie payments for woocommerce +1 more
Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Unpublished Product Purchase via mollie_paypal_create_order
CVE-2026-101166
3.7 Low
-
mollie payments for woocommerce, unknown mollie payments for woocommerce +1 more
Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Payment Surcharge Bypass via update_surcharge_order_pay
CVE-2026-101165
3.7 Low
-
eupago gateway for woocommerce, unknown eupago gateway for woocommerce +1 more
Eupago Gateway For Woocommerce 4.5.0 - 4.7.5 - Unauthenticated Payment Confirmation Bypass
CVE-2026-91075
5.3 Medium
-
unknown product filter for woocommerce by wbw
Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter
CVE-2026-11396
5.3 Medium
-
unknown product filter for woocommerce by wbw
Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter
CVE-2026-88942
6.1 Medium
-
unknown payable payment gateway for woocommerce
PAYable IPG < 1.3.1 - Unauthenticated Order Payment Forgery via Unsigned Callback
CVE-2026-94361
5.3 Medium
-
unknown pdf invoices & packing slips for woocommerce
PDF Invoices & Packing Slips for WooCommerce 5.16.2 - 5.16.4 - Unauthenticated Stored XSS via Order Address and Customer Note Fields
CVE-2026-111578
7.5 High
-
dots fraud prevention for woocommerce and edd
Fraud Prevention For WooCommerce and EDD < 2.3.6 - Subscriber+ Arbitrary Customer Blacklisting
CVE-2026-118072
5.4 Medium
-
unknown wallet system for woocommerce
Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR
CVE-2026-108763
4.3 Medium
-
paycomet for woocommerce, unknown paycomet for woocommerce +1 more
PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypass
CVE-2026-88928
6.5 Medium
-
unknown bitpay gateway for woocommerce
BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler
CVE-2026-103313
5.3 Medium
-
payplug for woocommerce (official), unknown payplug for woocommerce (official) +1 more
PayPlug for WooCommerce 2.8.0 - 3.1.0 - Unauthenticated Arbitrary Order Deletion, Modification and Disclosure
CVE-2026-113813
6.5 Medium
-
unknown افزونه پیامک ووکامرس | persian woocommerce sms
Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS via 'pwsms_mobiles' Parameter
CVE-2026-111021
7.1 High
-
payplug for woocommerce (official), unknown payplug for woocommerce (official) +1 more
PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intent
CVE-2026-110292
6.5 Medium
-
unknown menu cart for woocommerce
WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute
CVE-2026-105972
7.5 High
-
unknown checkout files upload for woocommerce
Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload
CVE-2026-103688
Public exploit
9.8 Critical
-
unknown unipay payment gateway for woocommerce
UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Payment Forgery via Empty IPN Secret
CVE-2026-103331
5.3 Medium
-
unknown paydunya woocommerce payment gateway
PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery
CVE-2026-103359
5.3 Medium
-
unknown tiendacrypto para woocommerce
TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC Bypass
CVE-2026-103325
3.7 Low
-
unknown payex payment gateway for woocommerce
Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key
CVE-2026-103332
5.3 Medium
-
unknown eurobank woocommerce payment gateway
Eurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified Callback
CVE-2026-103300
5.3 Medium
-
unknown mintpay for woocommerce
Mintpay <= 2.2.3 - Unauthenticated Order Payment Completion and Cancellation via Callback Forgery
CVE-2026-103381
6.5 Medium
-
unknown opay payment gateway for woocommerce
OPay Payment Gateway for WooCommerce <= 2.5.5 - Unauthenticated Payment Confirmation Forgery via Empty Default Secret Key
CVE-2026-103319
5.3 Medium
-
unknown ccavenue payment gateway for woocommerce
CCAvenue Payment Gateway for WooCommerce <= 3.1 - Unauthenticated Order Payment Completion via Webhook Forgery
CVE-2026-103298
5.3 Medium
-
unknown chikkili- google pay india for woocommerce
Chikkili Google Pay for WooCommerce <= 1.0.6 - Unauthenticated Payment Confirmation Forgery via Unverified Signature
CVE-2026-94295
5.3 Medium
-
unknown pixel tag manager for woocommerce
Pixel Tag Manager for WooCommerce < 2.2.3 - Contributor+ Stored XSS via Google Tag Manager Container ID
CVE-2026-105199
6.8 Medium
-
unknown cart abandonment recovery for woocommerce
Cart Abandonment Recovery for WooCommerce < 2.2.0 - Unauthenticated Authentication Bypass via Unsigned Recovery Token
CVE-2026-96901
3.7 Low
-
templateinvaders ti woocommerce wishlist
TI WooCommerce Wishlist < 2.13.0 - Unauthenticated Private Wishlist Disclosure via share_key
CVE-2026-15261
5.3 Medium
-
unknown sumit payment gateway for woocommerce
SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect Callback
CVE-2026-111957
5.3 Medium
-
unknown ipospays payment gateway for woocommerce
iPOSpays Payment Gateway for WooCommerce < 1.4.7 - Unauthenticated Payment Confirmation Forgery
CVE-2026-86791
5.3 Medium
-
unknown coinbase commerce payment gateway for woocommerce
Coinbase Commerce Payment Gateway for WooCommerce <= 1.4.1 - Unauthenticated Webhook Signature Bypass via Empty-Default Webhook Shared Secret
CVE-2026-103311
5.3 Medium
-
unknown activetrail for woocommerce
ActiveTrail for WooCommerce <= 1.2.6 - Unauthenticated Arbitrary Coupon Creation
CVE-2026-106028
5.3 Medium
-
pickplugins product designer for woocommerce, unknown pickplugins product designer for woocommerce +1 more
Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection
CVE-2026-87844
5.3 Medium
-
peachpay — payments & express checkout for woocommerce (supports stripe, paypal, square, authorize.net, nmi), unknown peachpay — payments & express checkout for woocommerce (supports stripe, paypal, square, authorize.net, nmi) +1 more
PeachPay 1.117.9 - 1.120.69 - Unauthenticated Order Key Disclosure via ConvesioPay BTCPay Status Check
CVE-2026-103376
5.3 Medium
-
unknown product delivery date for woocommerce
Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions
CVE-2026-110191
2.7 Low
-
unknown otp login & register woocommerce
OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute Force
CVE-2026-110135
7.4 High
-
unknown rede itaú for woocommerce
Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit Webhook
CVE-2026-92429
5.3 Medium
-
unknown rede itaú for woocommerce
Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook
CVE-2026-92428
5.3 Medium
-
unknown cardinity payment gateway for woocommerce
Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project Secret
CVE-2026-103324
5.3 Medium
- Show olderLoading…