wpwham
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Checkout Files Upload for WooCommerce | 1 | – | Nov 18, 2025 |
| Crowdfunding for WooCommerce | 1 | – | Jul 18, 2025 |
| Currency Switcher for WooCommerce | 1 | – | Mar 1, 2025 |
| SKU Generator for WooCommerce | 1 | – | Mar 1, 2025 |
Exploited and recent CVEs
- CVE-2025-4212 Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting 0.2%
- CVE-2025-5767 Crowdfunding for WooCommerce <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter 0.3%
- CVE-2024-9212 SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting 0.3%
- CVE-2024-9217 Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting 0.3%