Skip to content
Wpwebelite vulnerabilities
Newest
-
wpweb follow my blog post
WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitrary Content Deletion vulnerability
CVE-2025-68547
7.5 High
-
wpweb follow my blog post
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensitive Data Exposure vulnerability
CVE-2025-64258
7.5 High
-
wpweb woocommerce social login
WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39472
4.3 Medium
-
wpweb woocommerce pdf vouchers
WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-56265
7.1 High
-
wpweb woocommerce pdf vouchers
WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability
CVE-2024-54383
Public exploit
9.8 Critical
-
wpweb woocommerce - social login, woocommerce social login +1 more
Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider
CVE-2024-10114
8.1 High
-
wpweb woocommerce pdf vouchers
WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities
CVE-2024-39650
7.3 High
-
wpweb elite docket (woocommerce collections / wishlist / watchlist), docket +1 more
WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerability
CVE-2024-43132
9.3 Critical
-
wpweb docket (woocommerce collections / wishlist / watchlist), wpwebelite docket +1 more
WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability
CVE-2024-43131
7.5 High
-
wpweb woocommerce pdf vouchers
WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability
CVE-2024-39651
8.6 High
-
wpweb woocommerce - social login, woocommerce social login +1 more
WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
CVE-2024-7503
9.8 Critical
-
wpweb woocommerce pdf vouchers
WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-39652
7.1 High
-
wpweb woocommerce - social login, woocommerce social login +1 more
WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation
CVE-2024-6636
9.8 Critical
-
wpweb woocommerce - social login, woocommerce social login +1 more
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass
CVE-2024-6635
7.3 High
-
wpweb woocommerce - social login, wpwebelite woocommerce social login, yithemes yith woocommerce social login +2 more
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password
CVE-2024-6637
7.3 High
-
wpweb woocommerce social login
WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability
CVE-2024-37502
5.4 Medium
-
wpweb woocommerce - social login, woocommerce social login +1 more
WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injection
CVE-2024-5871
9.8 Critical
-
wpweb woocommerce - social login, wpwebelite woocommerce social login +1 more
WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness
CVE-2024-5868
6.5 Medium