Log in Start free

Vanquish

Products

ProductCVEsExploitedLatest
WooCommerce Support Ticket System5–Mar 25, 2026
User Extra Fields4–Feb 20, 2026
WordPress User Extra Fields4–Oct 31, 2025
WooCommerce Orders & Customers Exporter3–Jan 8, 2026
Upload Files Anywhere2–Feb 20, 2026
WooCommerce Order Details1–Mar 5, 2026
WooCommerce File Approval1–Aug 24, 2026
WooCommerce Customers Manager1–Feb 1, 2025
WooCommerce Bulk Product Editor1–Feb 20, 2026

Exploited and recent CVEs

  • CVE-2026-28171 High 8.6 WordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2026-32522 High 8.6 WordPress WooCommerce Support Ticket System plugin < 18.5 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2026-27374 High 7.5 WordPress WooCommerce Order Details plugin <= 3.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69381 High 7.1 WordPress WooCommerce Bulk Product Editor plugin <= 3.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69380 High 7.5 WordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Download vulnerability 0.4%
  • CVE-2025-69379 High 8.6 WordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2025-69377 High 7.7 WordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2025-69376 High 8.6 WordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability 0.6%
  • CVE-2025-67991 High 7.1 WordPress User Extra Fields plugin <= 16.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-22713 High 8.5 WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - SQL Injection vulnerability 0.4%
  • CVE-2025-67579 Medium 5.3 WordPress User Extra Fields plugin <= 16.8 - Broken Access Control vulnerability 0.2%
  • CVE-2025-7846 High 8.8 WordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function 0.7%
  • CVE-2025-53424 Medium 6.5 WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-48331 High 7.5 WordPress WooCommerce Orders & Customers Exporter <= 5.0 - Sensitive Data Exposure Vulnerability 0.4%
  • CVE-2024-13775 Medium 5.4 WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure 0.2%
  • CVE-2024-13343 High 8.8 WooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation 0.4%
  • CVE-2024-11150 Critical 9.8 WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletion 1.4%
  • CVE-2024-10800 High 8.8 WordPress User Extra Fields <= 16.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation 0.8%
  • CVE-2024-10801 Critical 9.8 WordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Upload 0.9%
  • CVE-2024-10627 Critical 9.8 WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Upload 0.9%
  • CVE-2024-10626 High 8.8 WooCommerce Support Ticket System <= 17.7 - Authenticated (Subscriber+) Arbitrary File Deletion 0.9%
  • CVE-2024-10625 Critical 9.8 WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Deletion 1.0%