wpgenie
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WooCommerce Lottery | 2 | – | Oct 6, 2026 |
| WooCommerce Simple Auctions | 1 | – | Oct 6, 2026 |
Exploited and recent CVEs
- CVE-2026-42635 WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-32580 WordPress WooCommerce Lottery plugin <= 2.2.9 - SQL Injection vulnerability 0.3%
- CVE-2026-18884 WooCommerce Lottery <= 2.2.9 - Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters 0.5%