hippooo Hippoo Mobile App for WooCommerce

• CVE-2026-111601 Medium 6.1 Hippoo Mobile App for WooCommerce <= 1.12.0 - Reflected Cross-Site Scripting via 'token_id' Parameter 0.2%
• CVE-2026-108483 High 7.1 WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-49065 High 8.2 WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability 0.2%
• CVE-2026-10580 Critical 9.8 Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API 2.9%
• CVE-2025-12655 Medium 5.3 Hippoo Mobile App for WooCommerce <= 1.7.1 - Missing Authorization to Unauthenticated Limited File Write 0.3%
• CVE-2025-13339 High 7.5 Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read 2.2%