Skip to contentUnknown Woocommerce vulnerabilities
- unknown subscriptions for woocommerceSubscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key BypassCVE-2026-878545.3 Medium
- anzia ni woocommerce sales reportNi WooCommerce Sales Report < 4.2.0 - Unauthenticated Order and Customer Data Disclosure via 'btn_print' ParameterCVE-2026-784745.3 Medium
- anzia ni woocommerce sales reportNi WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' ParameterCVE-2026-784728.6 High
- unknown product xml feed manager for woocommerceProduct XML Feed Manager for WooCommerce < 3.1.1 - Contributor+ Arbitrary Product Deletion via ShortcodeCVE-2026-879194.9 Medium
- unknown payment gateway paypay for woocommerceWC PayPay Gateway 0.5 - 0.9.3 - Unauthenticated Payment Bypass via Unverified WebhookCVE-2026-822155.9 Medium
- unknown yith woocommerce wishlist, yith woocommerce wishlist +1 moreYITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_titleCVE-2026-823055.3 Medium
- themifyme themify – woocommerce product filterThemify – WooCommerce Product Filter <= 1.5.5 - Reflected Cross-Site ScriptingCVE-2026-781726.1 Medium
- themegrill registration form for woocommerceRegistration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_idCVE-2026-814317.2 High
- unknown zipmoney(zip co) payments plugin for woocommercezipMoney(Zip Co) Payments Plugin for WooCommerce < 2.4.0 - Unauthenticated Arbitrary Option DeletionCVE-2026-783619.1 Critical
- unknown ultimate gift cards for woocommerceUltimate Gift Cards for WooCommerce 3.0.3 - 3.2.9 - Unauthenticated Gift Card Code and Customer PII Disclosure via wps_uwgc_report_detailsCVE-2026-194397.5 High
- unknown ultimate gift cards for woocommerceUltimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted PurchaseCVE-2026-194367.5 High
- payment plugins for paypal woocommerce, unknown payment plugins for paypal woocommerce +1 morePayment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDORCVE-2026-803415.9 Medium
- payment plugins for paypal woocommerce, unknown payment plugins for paypal woocommerce +1 morePayment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-payCVE-2026-803405.3 Medium
- paymentplugins payment plugins for stripe woocommercePayment Plugins for Stripe WooCommerce < 4.0.12 - Unauthenticated Customer PII Disclosure via order-payCVE-2026-803395.3 Medium
- unknown ultimate gift cards for woocommerceUltimate Gift Cards for WooCommerce < 3.2.10 - Subscriber+ Gift Card Theft and Destruction via Unauthorized RedemptionCVE-2026-758616.5 Medium
- elextensions elex woocommerce request a quoteELEX WooCommerce Request a Quote < 2.4.1 - Unauthenticated SQLi via variation_idCVE-2026-149628.6 High
- unknown product filter for woocommerce by wbwProduct Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' ParameterCVE-2026-78046.1 Medium
- unknown b2bking — ultimate woocommerce b2b and wholesale plugin — wholesale prices, bulk order form & moreB2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role SelectionCVE-2026-850385.3 Medium
- magepeopleteam e-cab taxi booking manager for woocommerceE-cab Taxi Booking Manager for Woocommerce < 2.0.5 - Unauthenticated Price Manipulation via mptbm_add_to_cartCVE-2026-840455.3 Medium
- unknown epayco payment gateway for woocommerceePayco Payment Gateway for WooCommerce < 8.4.7 - Unauthenticated Payment Confirmation BypassCVE-2026-840435.3 Medium
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' ParameterCVE-2026-765858.8 High
- totalprocessing total processing card payments for woocommerceTotal Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential DisclosureCVE-2026-169479.1 Critical
- unknown mobile app for woocommerce: shopapper mobile app builder service for woocommerceShopApper <= 0.4.62 - Subscriber+ Arbitrary Product Stock UpdateCVE-2026-165694.3 Medium
- unknown mobile app for woocommerce: shopapper mobile app builder service for woocommerceShopApper <= 0.4.62 - Subscriber+ Customer Data Disclosure via IDORCVE-2026-165684.3 Medium
- unknown return refund and exchange for woocommerceWoo Refund And Exchange Lite < 4.6.4 - Unauthenticated Guest Order Message Disclosure and ManipulationCVE-2026-776956.5 Medium
- railmedia order tip for woocommerceOrder Tip for WooCommerce < 1.6.0 - Shop Manager+ Arbitrary File Deletion via delete_exported_csv_file_ajaxCVE-2026-776938.7 High
- unknown woocommerce bookings, woocommerce bookings +1 moreWooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing AuthorizationCVE-2026-148534.3 Medium
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.0.14 - Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied AmountCVE-2026-165772.7 Low
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST APICVE-2026-165767.2 High
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST EndpointCVE-2026-165755.3 Medium
- unknown membership for woocommerceMembership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret BypassCVE-2026-197095.3 Medium
- unknown shopsmart loyalty for woocommerceShopSmart Loyalty for WooCommerce <= 1.0.0 - Unauthenticated Sensitive Information Disclosure via shopsmart_check_phoneCVE-2026-148325.3 Medium
- edgarrojas extra product options builder for woocommerceExtra Product Options Builder for WooCommerce < 1.2.176 - Unauthenticated Customer File Disclosure via getpublicfileuploadCVE-2026-197287.5 High
- unknown product feed pro for woocommerce by adtribesProduct Feed PRO for WooCommerce < 13.5.7 - Unauthenticated Feed Configuration DisclosureCVE-2026-166117.5 High
- unknown epeken all kurir for woocommerceEpeken All Kurir <= 2.1.4 - Unauthenticated Order Payment Confirmation ForgeryCVE-2026-167395.9 Medium
- paymob for woocommerce, unknown paymob for woocommerce +1 morePaymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel LookupCVE-2026-152058.6 High
- mailchimp for woocommerce, unknown mailchimp for woocommerce +1 moreWordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerabilityCVE-2026-733467.6 High
- unknown shopengine elementor woocommerce builder addonShopEngine < 4.9.3 - Customer PII Disclosure via Forced AuthenticationCVE-2026-190885.4 Medium
- unknown customer email verification for woocommerceCustomer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication BypassCVE-2026-141829.8 Critical
- easy payment payment gateway for paypal on woocommercePayment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via PayPal Advanced Return HandlerCVE-2026-166215.3 Medium
- unknown wallet system for woocommerceWallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet AmountCVE-2026-150456.5 Medium
- unknown order sync with zendesk for woocommerceOrder Sync with Zendesk for WooCommerce < 2.2.3 - Unauthenticated Customer Order Data DisclosureCVE-2026-190735.3 Medium
- unknown woocommerce subscriptionsWooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object InjectionCVE-2026-183919.8 Critical
- subratamal wallet for woocommerceTeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-UpCVE-2026-165389.1 Critical
- tychesoftwares product input fields for woocommerceProduct Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File UploadCVE-2026-19089Public exploit9.8 Critical
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX ActionsCVE-2026-149415.4 Medium
- unknown accept paypal & stripe with subscriptions for woocommerceRestore PayPal Standard for WooCommerce <= 3.1.0 - Payment Bypass via PDT UnderpaymentCVE-2026-170163.7 Low
- unknown accept paypal & stripe with subscriptions for woocommerceRestore PayPal Standard for WooCommerce <= 3.1.0 - Payment Bypass via Unvalidated receiver_emailCVE-2026-170125.3 Medium
- unknown piweb cancel order / refund request for woocommerceCancel Order & Request Woocommerce < 1.3.4.34 - Unauthenticated Order Content Disclosure via Reorder AJAX ActionsCVE-2026-186036.5 Medium
- unknown wpc order tip for woocommerceWPC Order Tip for WooCommerce < 3.3.1 - Unauthenticated Order Data DisclosureCVE-2026-183577.5 High
- Show moreLoading…