Log in Start free

StoreApps

Products

ProductCVEsExploitedLatest
Smart Manager4–Jul 23, 2026
Affiliate For WooCommerce (WordPress plugin)2–Aug 5, 2022
Stock Manager for WooCommerce2–Jan 22, 2026
News Announcement Scroll1–Mar 13, 2024
News Announcement Scroll (WordPress plugin)1–Nov 17, 2022
Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet)1–Oct 3, 2026
WooCommerce Stock Manager1–Jul 21, 2021

Exploited and recent CVEs

  • CVE-2026-18443 High 8.8 Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter 0.4%
  • CVE-2026-57704 High 7.1 WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-45216 High 8.8 WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability 0.4%
  • CVE-2026-24365 Medium 5.4 WordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-22710 High 7.6 WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability 0.9%
  • CVE-2024-49687 Medium 4.3 WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerability 0.3%
  • CVE-2023-5663 High 8.8 News Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcode 0.8%
  • CVE-2023-35091 Medium 4.3 WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2022-40694 Medium 4.8 WordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability 0.4%
  • CVE-2022-36284 Medium 6.4 WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change 0.7%
  • CVE-2022-25649 Medium 5.0 WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities 0.9%
  • CVE-2021-34619 High 8.8 Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin 0.7%