Techspawn
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| MultiLoca - WooCommerce Multi Locations Inventory Management | 2 | – | Sep 24, 2025 |
| Distance Rate Shipping for WooCommerce | 1 | – | Feb 18, 2025 |
| MultiLoca | 1 | – | Jun 17, 2026 |
| WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce | 1 | – | May 23, 2025 |
Exploited and recent CVEs
- CVE-2026-39546 WordPress MultiLoca plugin <= 4.2.15 - Privilege Escalation vulnerability 0.3%
- CVE-2025-9054 MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler' 0.4%
- CVE-2025-31056 WordPress WhatsCart plugin <= 1.1.0 - SQL Injection vulnerability 0.5%
- CVE-2025-22639 WordPress Distance Rate Shipping for WooCommerce plugin <= 1.3.4 - SQL Injection vulnerability 0.4%
- CVE-2024-13341 MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.1.11 - Authenticated (Subscriber+) SQL Injection 0.5%