Skip to content
Wpcodefactory vulnerabilities
Newest
-
wpcodefactory customer email verification for woocommerce
Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter
CVE-2026-104745
Public exploit
8.1 High
-
wpcodefactory helpdesk support ticket system for woocommerce
Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter
CVE-2026-11399
4.3 Medium
-
wpcodefactory cost of goods: product cost & profit calculator for woocommerce
Cost of Goods: Product Cost & Profit Calculator for WooCommerce <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2026-6962
6.4 Medium
-
wpcodefactory wholesale products dynamic pricing management woocommerce
WholeSale Products Dynamic Pricing Management WooCommerce <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
CVE-2026-4479
4.4 Medium
-
wpcodefactory order minimum/maximum amount limits for woocommerce
Order Minimum/Maximum Amount Limits for WooCommerce <= 4.6.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Hide Add to Cart Content Fields
CVE-2026-1381
4.4 Medium
-
wpcodefactory download plugins and themes in zip from dashboard
Download Plugins and Themes from Dashboard <= 1.9.6 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival
CVE-2025-14399
4.3 Medium
-
wpcodefactory stock history & reports manager for woocommerce
Stock History & Reports Manager for WooCommerce <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-10167
6.4 Medium
-
wpcodefactory wishlist for woocommerce: multi wishlists per customer, wpfactory wishlist for woocommerce +1 more
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name
CVE-2024-13774
6.1 Medium
-
wpcodefactory customer email verification for woocommerce
Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2024-13525
6.5 Medium
-
wpcodefactory customer email verification for woocommerce
Customer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via Shortcode
CVE-2024-13528
7.5 High
-
algoritmika additional custom order status for woocommerce
Additional Custom Order Status for WooCommerce <= 1.6.0 - Reflected Cross-Site Scripting
CVE-2024-11814
6.1 Medium
-
wpcodefactory custom css, js & php
Custom CSS, JS & PHP <= 2.3.0 - Reflected Cross-Site Scripting
CVE-2024-11330
6.1 Medium
-
algoritmika pdf invoices & packing slips generator for woocommerce
PDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting
CVE-2024-11361
6.1 Medium
-
wpcodefactory download plugins and themes in zip from dashboard
Download Plugins and Themes in ZIP from Dashboard <= 1.9.1 - Reflected Cross-Site Scripting
CVE-2024-9232
6.1 Medium
-
wpcodefactory export products, orders & customers for woocommerce, wpfactory products\, order \& customers export for woocommerce +1 more
Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting
CVE-2024-9377
6.1 Medium
-
wpcodefactory maximum products per user for woocommerce
Maximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site Scripting
CVE-2024-9205
6.1 Medium
-
wpcodefactory price by quantity & bulk quantity discounts for woocommerce, wpfactory quantity dynamic pricing \& bulk discounts for woocommerce +1 more
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting
CVE-2024-9384
6.1 Medium
-
wpcodefactory eu/uk vat validation manager for woocommerce, wpfactory eu\/uk vat manager, eu\/uk vat manager for woocommerce +2 more
EU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization
CVE-2024-9189
5.3 Medium
-
wpcodefactory eu/uk vat validation manager for woocommerce, wpfactory eu\/uk vat manager for woocommerce +1 more
EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting
CVE-2024-8788
6.1 Medium
-
wpcodefactory download plugins and themes in zip from dashboard
Download Plugins and Themes from Dashboard <= 1.8.7 - Cross-Site Request Forgery
CVE-2024-7501
4.2 Medium
-
wpcodefactory customer email verification for woocommerce
Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness
CVE-2024-4185
8.1 High
-
wpfactory ean for woocommerce, wpcodefactory ean barcode generator for woocommerce: upc, isbn & gtin inventory +1 more
EAN for WooCommerce <= 4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta Shortcode
CVE-2023-6892
6.4 Medium
-
wpfactory ean for woocommerce, wpcodefactory ean barcode generator for woocommerce: upc, isbn & gtin inventory +1 more
EAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode
CVE-2023-6897
4.3 Medium
-
wpcodefactory cost of goods: product cost & profit calculator for woocommerce, wpfactory cost of goods for woocommerce +1 more
Cost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce <= 3.2.8 - Reflected Cross-Site Scripting
CVE-2024-0821
6.1 Medium