CVE-2026-81786WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability Exploitation status Not confirmed Fix Affected product T Thank You Page Customizer for WooCommerce Published 09/10/2026 Severity High CVE-2026-81282WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product P Product Variations Swatches for WooCommerce Published 09/03/2026 Severity Medium CVE-2026-82227WordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product W WPBulky Published 08/28/2026 Severity High CVE-2026-81277WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product S Suggestion Engine for WooCommerce Published 08/27/2026 Severity High CVE-2026-57698WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerability Exploitation status Not known exploited Fix Affected product A Abandoned Cart Recovery for WooCommerce Published 07/13/2026 Severity Medium CVE-2026-57422WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product B Bopo – WooCommerce Product Bundle Builder Published 07/13/2026 Severity High CVE-2026-11778CURCY <= 2.2.14 - Unauthenticated Arbitrary Shortcode Execution via 'exchange' Parameter Exploitation status Not known exploited Fix Affected product C CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x Published 07/03/2026 Severity Medium CVE-2026-57352WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerability Exploitation status Not known exploited Fix Affected product A ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce Published 07/02/2026 Severity Medium CVE-2026-57664WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.1.6 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product B Bopo – WooCommerce Product Bundle Builder Published 06/26/2026 Severity Medium CVE-2026-57324WordPress GIFT4U plugin <= 1.0.10 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product G GIFT4U Published 06/26/2026 Severity Medium CVE-2026-54809WordPress GIFT4U plugin <= 1.0.10 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product G GIFT4U Published 06/17/2026 Severity Critical CVE-2026-39593WordPress HAPPY plugin <= 1.0.10 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product H HAPPY Published 05/21/2026 Severity Medium CVE-2026-40737WordPress COMPE plugin <= 1.1.4 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix Affected product C COMPE Published 04/15/2026 Severity Medium CVE-2026-32526WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Abandoned Cart Recovery for WooCommerce Published 03/25/2026 Severity High CVE-2026-28132WordPress WooCommerce Photo Reviews plugin <= 1.4.4 - Content Injection vulnerability Exploitation status Not known exploited Fix Affected product W WooCommerce Photo Reviews Published 02/26/2026 Severity Medium CVE-2025-67977WordPress HAPPY plugin <= 1.0.8 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product H HAPPY Published 02/20/2026 Severity High CVE-2026-27052WordPress Sales Countdown Timer for WooCommerce and WordPress plugin < 1.1.9 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product S Sales Countdown Timer for WooCommerce and WordPress Published 02/19/2026 Severity High CVE-2026-2019Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting Exploitation status Not known exploited Fix Affected product C Cart All In One For WooCommerce Published 02/18/2026 Severity High CVE-2025-14541Lucky Wheel Giveaway <= 1.0.22 - Authenticated (Administrator+) Remote Code Execution via 'conditional_tags' Parameter Exploitation status Not known exploited Fix Affected product L Lucky Wheel Giveaway Published 02/11/2026 Severity High CVE-2025-14509Lucky Wheel for WooCommerce – Spin a Sale <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags Exploitation status Not known exploited Fix Affected product L Lucky Wheel for WooCommerce – Spin a Sale Published 12/30/2025 Severity High CVE-2025-68550WordPress WPBulky plugin <= 1.1.13 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product W WPBulky Published 12/23/2025 Severity High CVE-2025-68556WordPress HAPPY plugin <= 1.0.9 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product H HAPPY Published 12/23/2025 Severity Medium CVE-2025-14581HAPPY – Helpdesk Support Ticket System <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Reply Exploitation status Not known exploited Fix Affected product H HAPPY – Helpdesk Support Ticket System Published 12/13/2025 Severity Medium CVE-2025-66528WordPress Thank You Page Customizer for WooCommerce plugin <= 1.1.8 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product T Thank You Page Customizer for WooCommerce Published 12/09/2025 Severity Medium CVE-2025-49372WordPress HAPPY plugin <= 1.0.7 - Remote Code Execution (RCE) vulnerability Exploitation status Not known exploited Fix Affected product H HAPPY Published 11/06/2025 Severity Critical CVE-2025-64200WordPress Email Template Customizer for WooCommerce plugin <= 1.2.17 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Email Template Customizer for WooCommerce Published 10/29/2025 Severity Medium CVE-2025-47570WordPress WooCommerce Photo Reviews plugin <= 1.3.13 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product W WooCommerce Photo Reviews Published 09/09/2025 Severity High CVE-2025-53571WordPress HAPPY plugin <= 1.0.6 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product H HAPPY Published 09/05/2025 Severity Medium CVE-2025-30993WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.7 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product T Thank You Page Customizer for WooCommerce Published 08/14/2025 Severity Medium CVE-2025-47563WordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerability Exploitation status Not known exploited Fix Affected product C CURCY Published 05/16/2025 Severity Medium CVE-2024-13320CURCY - WooCommerce Multi Currency - Currency Switcher <= 2.3.6 - Unauthenticated SQL Injection Exploitation status Not known exploited Fix Affected product C CURCY - WooCommerce Multi Currency - Currency Switcher Published 03/07/2025 Severity High CVE-2024-13487CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function Exploitation status Not known exploited Fix Affected product C CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x Published 02/06/2025 Severity High CVE-2024-12861W2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read Exploitation status Not known exploited Fix Affected product W W2S – Migrate WooCommerce to Shopify Published 01/30/2025 Severity Medium CVE-2025-22803WordPress Advanced Product Information for WooCommerce plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Advanced Product Information for WooCommerce Published 01/09/2025 Severity Medium CVE-2022-46811WordPress ALD Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 1.0.21 - Broken Access Control + CSRF Exploitation status Not known exploited Fix Affected product A ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce Published 12/13/2024 Severity Medium CVE-2022-46796WordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerability Exploitation status Not known exploited Fix Affected product C CURCY Published 12/13/2024 Severity Medium CVE-2024-49283WordPress CURCY plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product C CURCY Published 10/17/2024 Severity High CVE-2024-49288WordPress Email Template Customizer for WooCommerce plugin <= 1.2.9.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Email Template Customizer for WooCommerce Published 10/17/2024 Severity Medium CVE-2024-8277WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation Exploitation status Not known exploited Fix Affected product W WooCommerce Photo Reviews Premium Published 09/11/2024 Severity Critical CVE-2024-4039Orders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode Execution Exploitation status Not known exploited Fix Affected product O Orders Tracking for WooCommerce Published 05/10/2024 Severity Medium CVE-2024-1687Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution Exploitation status Not known exploited Fix Affected product T Thank You Page Customizer for WooCommerce – Increase Your Sales Published 02/27/2024 Severity Medium CVE-2024-1686Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Data Export Exploitation status Not known exploited Fix Affected product T Thank You Page Customizer for WooCommerce – Increase Your Sales Published 02/27/2024 Severity Medium CVE-2023-50831WordPress CURCY Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not confirmed Fix Affected product C CURCY – Multi Currency for WooCommerce Published 12/21/2023 Severity Medium CVE-2023-48778WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product P Product Size Chart For WooCommerce Published 12/18/2023 Severity Medium CVE-2023-4216Orders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/Read Exploitation status Public exploit Fix Affected product O Orders Tracking for WooCommerce Published 09/04/2023 Severity Low CVE-2023-30482WordPress WPBulky Plugin < 1.0.10 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product W WPBulky Published 08/08/2023 Severity Medium CVE-2021-4395Abandoned Cart Recovery for WooCommerce <= 1.0.4 - Cross-Site Request Forgery Bypass Exploitation status Not known exploited Fix Affected product A Abandoned Cart Recovery for WooCommerce Published 07/01/2023 Severity Medium CVE-2021-4379WooCommerce Multi Currency <= 2.1.17 - Missing Authorization Exploitation status Not known exploited Fix Affected product C CURCY - WooCommerce Multi Currency - Currency Switcher Published 06/07/2023 Severity Medium CVE-2021-4376WooCommerce Multi Currency <= 2.1.17 - Missing Authorization Exploitation status Not known exploited Fix Affected product C CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x Published 06/07/2023 Severity Medium CVE-2022-46810WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product T Thank You Page Customizer for WooCommerce – Increase Your Sales Published 05/25/2023 Severity Medium CVE-2022-46812WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product T Thank You Page Customizer for WooCommerce – Increase Your Sales Published 05/25/2023 Severity Medium CVE-2022-46806WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product C Cart All In One For WooCommerce Published 03/01/2023 Severity Medium CVE-2022-44634WordPress S2W – Import Shopify to WooCommerce plugin <= 1.1.12 - Auth. Arbitrary File Read vulnerability Exploitation status Not known exploited Fix Affected product S S2W – Import Shopify to WooCommerce (WordPress plugin) Published 11/18/2022 Severity Medium CVE-2022-41623WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product A ALD - AliExpress Dropshipping and Fulfillment for WooCommerce (WordPress plugin) Published 10/14/2022 Severity High CVE-2022-1037EXMAGE < 1.0.7 - Admin+ Blind SSRF Exploitation status Not confirmed Fix Affected product E EXMAGE – WordPress Image Links Published 04/18/2022 Severity Unknown CVE-2021-25062Orders Tracking for WooCommerce < 1.1.10 - Reflected Cross-Site Scripting Exploitation status Not confirmed Fix Affected product O Orders Tracking for WooCommerce Published 01/24/2022 Severity Unknown 
.svg){kind=icon}
.svg){kind=icon}
