Skip to content
Wpwham vulnerabilities
Newest
-
unknown checkout files upload for woocommerce
Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload
CVE-2026-103688
Public exploit
9.8 Critical
-
wp wham checkout files upload for woocommerce
WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-42725
6.5 Medium
-
wpwham checkout files upload for woocommerce
Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-4212
7.2 High
-
wpwham crowdfunding for woocommerce
Crowdfunding for WooCommerce <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
CVE-2025-5767
6.4 Medium
-
wp wham crowdfunding for woocommerce
WordPress Crowdfunding for WooCommerce Plugin <= 3.1.12 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32628
7.1 High
-
wp wham checkout files upload for woocommerce
WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-39520
6.5 Medium
-
wp wham sku generator for woocommerce
SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting
CVE-2024-9212
6.1 Medium
-
pressmaximum currency switcher for woocommerce
Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting
CVE-2024-9217
6.1 Medium
-
wp wham product visibility by country for woocommerce
WordPress Product Visibility by Country for WooCommerce Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47660
5.9 Medium
-
wpwham checkout files upload for woocommerce, wp wham checkout files upload for woocommerce (wordpress plugin) +1 more
WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability
CVE-2022-29425
6.1 Medium
-
wpwham currency switcher for woocommerce
An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user...
CVE-2019-18668
6.5 Medium