Skip to content

Vanquish vulnerabilities

Products

Newest

vanquish woocommerce file approval WordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerability CVE-2026-28171 8.6 HighAugust 24, 2026
vanquish woocommerce support ticket system WordPress WooCommerce Support Ticket System plugin < 18.5 - Arbitrary File Deletion vulnerability CVE-2026-32522 8.6 HighMarch 25, 2026
vanquish woocommerce order details WordPress WooCommerce Order Details plugin <= 3.1 - Broken Access Control vulnerability CVE-2026-27374 7.5 HighMarch 5, 2026
vanquish woocommerce bulk product editor WordPress WooCommerce Bulk Product Editor plugin <= 3.0 - Broken Access Control vulnerability CVE-2025-69381 7.1 HighFebruary 20, 2026
vanquish upload files anywhere WordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Download vulnerability CVE-2025-69380 7.5 HighFebruary 20, 2026
vanquish upload files anywhere WordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Deletion vulnerability CVE-2025-69379 8.6 HighFebruary 20, 2026
vanquish user extra fields WordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability CVE-2025-69377 7.7 HighFebruary 20, 2026
vanquish user extra fields WordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability CVE-2025-69376 8.6 HighFebruary 20, 2026
vanquish user extra fields WordPress User Extra Fields plugin <= 16.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-67991 7.1 HighFebruary 20, 2026
vanquish woocommerce orders & customers exporter WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - SQL Injection vulnerability CVE-2025-22713 8.5 HighJanuary 8, 2026
vanquish user extra fields WordPress User Extra Fields plugin <= 16.8 - Broken Access Control vulnerability CVE-2025-67579 5.3 MediumDecember 9, 2025
vanquish wordpress user extra fields WordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function CVE-2025-7846 8.8 HighOctober 31, 2025
vanquish woocommerce orders & customers exporter WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability CVE-2025-53424 6.5 MediumOctober 22, 2025
vanquish woocommerce orders & customers exporter WordPress WooCommerce Orders & Customers Exporter <= 5.0 - Sensitive Data Exposure Vulnerability CVE-2025-48331 7.5 HighMay 30, 2025
vanquish woocommerce support ticket system WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure CVE-2024-13775 5.4 MediumFebruary 1, 2025
unknown woocommerce customers manager WooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CVE-2024-13343 8.8 HighFebruary 1, 2025
vanquish user extra fields, wordpress user extra fields +1 more WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletion CVE-2024-11150 9.8 CriticalNovember 13, 2024
vanquish user extra fields, wordpress user extra fields +1 more WordPress User Extra Fields <= 16.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CVE-2024-10800 8.8 HighNovember 13, 2024
unknown woocommerce upload files, woocommerce upload files +1 more WooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Upload CVE-2024-10820 9.8 CriticalNovember 13, 2024
vanquish wordpress user extra fields WordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Upload CVE-2024-10801 9.8 CriticalNovember 9, 2024
support ticket system project ticket system, vanquish woocommerce support ticket system +1 more WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Upload CVE-2024-10627 9.8 CriticalNovember 9, 2024
support ticket system project ticket system, vanquish woocommerce support ticket system +1 more WooCommerce Support Ticket System <= 17.7 - Authenticated (Subscriber+) Arbitrary File Deletion CVE-2024-10626 8.8 HighNovember 9, 2024
support ticket system project ticket system, vanquish woocommerce support ticket system +1 more WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Deletion CVE-2024-10625 9.8 CriticalNovember 9, 2024
unknown woocommerce customers manager, woocommerce customers manager +1 more WooCommerce Customers Manager < 30.1 - Bulk Action via CSRF CVE-2024-3983 8.1 HighAugust 1, 2024
unknown woocommerce customers manager, woocommerce customers manager +1 more WooCommerce Customers Manager < 30.1 - User Deletion via CSRF CVE-2024-2843 6.5 MediumAugust 1, 2024
unknown woocommerce customers manager, woocommerce customers manager +1 more WooCommerce Customers Manager < 30.2 - Subscriber+ Stored XSS CVE-2024-1747 6.5 MediumAugust 1, 2024
unknown woocommerce customers manager WooCommerce Customers Manager < 29.8 - Subscriber+ Email Disclosure CVE-2024-1756 6.5 MediumApril 24, 2024
unknown woocommerce customers manager, woocommerce customers manager +1 more WooCommerce Customers Manager < 29.8 - Reflected XSS CVE-2024-1743 5.9 MediumApril 24, 2024
unknown woocommerce customers manager, woocommerce customers manager +1 more WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection CVE-2024-0399 Public exploit 8.1 HighApril 15, 2024
unknown woocommerce upload files WooCommerce Upload Files < 59.4 - Unauthenticated Arbitrary File Upload CVE-2021-24171 9.8 CriticalApril 5, 2021