powerfulwp
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Local Delivery Drivers for WooCommerce | 3 | – | Aug 13, 2026 |
| Gift Message for WooCommerce | 1 | – | Mar 27, 2025 |
Exploited and recent CVEs
- CVE-2026-66468 WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-30923 WordPress Gift Message for WooCommerce plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2022-4974 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
- CVE-2023-51481 WordPress Local Delivery Drivers for WooCommerce plugin <= 1.9.0 - Unauthenticated Account Takeover vulnerability 0.5%