WooCommerce

Articles tagged WooCommerce

• 
  Vulnerability

  Affiliate Pro - Affiliate Program for WooCommerce & WordPress Privilege Escalation (CVE-2026-32558)

  CVE-2026-32558 is a CVSS 9.8 unauthenticated privilege escalation flaw in the Affiliate Pro WordPress plugin, reported exploited by VulnCheck KEV.

  redefiningthewebwordpresswoocommerce +3

  2026-09-20
• 
  Vulnerability

  HUSKY – Products Filter Professional for WooCommerce Vulnerability (CVE-2026-18562)

  CVE-2026-18562 is a CVSS 6.1 reflected XSS in the HUSKY Products Filter plugin for WooCommerce, per VulnCheck alone.

  huskywoocommercewordpress +3

  2026-09-20
• 
  Vulnerability

  Custom User Registration Fields for WooCommerce Privilege Escalation (CVE-2026-15369)

  CVE-2026-15369 is a CVSS 9.8 flaw in a WooCommerce checkout plugin allowing unauthenticated Administrator account creation, reported exploited by VulnCheck.

  addifywordpresswoocommerce +3

  2026-09-20
• 
  Vulnerability

  WooCommerce Lottery SQL Injection (CVE-2026-18884)

  CVE-2026-18884 is a CVSS 7.5 unauthenticated SQL injection in the WooCommerce Lottery WordPress plugin, per VulnCheck alone.

  woocommercewordpresssql-injection +3

  2026-09-20
• 
  Vulnerability

  Gift Cards For WooCommerce Pro Vulnerability (CVE-2026-15039)

  CVE-2026-15039 is a CVSS 9.8 unrestricted file upload flaw in a WooCommerce gift-card plugin allowing unauthenticated RCE, reported exploited by VulnCheck.

  wp-swingswordpresswoocommerce +4

  2026-09-20
• 
  Vulnerability

  YITH WooCommerce Waitlist Premium Privilege Escalation (CVE-2026-14359)

  CVE-2026-14359 is a CVSS 8.8 privilege escalation in YITH WooCommerce Waitlist Premium, reported exploited by VulnCheck alone.

  yithwoocommercewordpress +4

  2026-09-20