Wwpcodefactory

Products

Exploited and recent CVEs

• CVE-2026-104745 High 8.1 Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter 0.7%
• CVE-2026-11399 Medium 4.3 Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter 0.2%
• CVE-2026-6962 Medium 6.4 Cost of Goods: Product Cost & Profit Calculator for WooCommerce <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2026-4479 Medium 4.4 WholeSale Products Dynamic Pricing Management WooCommerce <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings 0.2%
• CVE-2026-1381 Medium 4.4 Order Minimum/Maximum Amount Limits for WooCommerce <= 4.6.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Hide Add to Cart Content Fields 0.3%
• CVE-2025-14399 Medium 4.3 Download Plugins and Themes from Dashboard <= 1.9.6 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival 0.1%
• CVE-2025-10167 Medium 6.4 Stock History & Reports Manager for WooCommerce <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2024-13774 Medium 6.1 Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name 0.2%
• CVE-2024-13525 Medium 6.5 Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure 0.4%
• CVE-2024-13528 High 7.5 Customer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via Shortcode 0.5%
• CVE-2024-11814 Medium 6.1 Additional Custom Order Status for WooCommerce <= 1.6.0 - Reflected Cross-Site Scripting 0.3%
• CVE-2024-11330 Medium 6.1 Custom CSS, JS & PHP <= 2.3.0 - Reflected Cross-Site Scripting 0.5%
• CVE-2024-11361 Medium 6.1 PDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting 0.5%
• CVE-2024-9232 Medium 6.1 Download Plugins and Themes in ZIP from Dashboard <= 1.9.1 - Reflected Cross-Site Scripting 0.4%
• CVE-2024-9377 Medium 6.1 Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting 0.4%
• CVE-2024-9205 Medium 6.1 Maximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site Scripting 0.4%
• CVE-2024-9384 Medium 6.1 Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting 0.4%
• CVE-2024-9189 Medium 5.3 EU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization 0.5%
• CVE-2024-8788 Medium 6.1 EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting 0.4%
• CVE-2024-7501 Medium 4.2 Download Plugins and Themes from Dashboard <= 1.8.7 - Cross-Site Request Forgery 0.2%
• CVE-2024-4185 High 8.1 Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness 0.9%
• CVE-2023-6892 Medium 6.4 EAN for WooCommerce <= 4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta Shortcode 0.3%
• CVE-2023-6897 Medium 4.3 EAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode 0.4%
• CVE-2024-0821 Medium 6.1 Cost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce <= 3.2.8 - Reflected Cross-Site Scripting 0.4%