WP Wham
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Checkout Files Upload for WooCommerce | 2 | – | May 27, 2026 |
| All Currencies for WooCommerce | 1 | – | Jun 6, 2025 |
| Checkout Files Upload for WooCommerce (WordPress plugin) | 1 | – | May 20, 2022 |
| Crowdfunding for WooCommerce | 1 | – | Apr 17, 2025 |
| Product Visibility by Country for WooCommerce | 1 | – | Nov 14, 2023 |
| SKU Generator for WooCommerce | 1 | – | Apr 1, 2025 |
Exploited and recent CVEs
- CVE-2026-42725 WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability 0.3%
- CVE-2025-30950 WordPress All Currencies for WooCommerce plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-32628 WordPress Crowdfunding for WooCommerce Plugin <= 3.1.12 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-39520 WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability 0.4%
- CVE-2025-30917 WordPress SKU Generator for WooCommerce plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) Vulnerability 0.3%
- CVE-2023-47660 WordPress Product Visibility by Country for WooCommerce Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-29425 WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability 0.7%