Read the docs

hippooo

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

hippooo records in CISA KEV

No hippooo vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2026-09098 CVE-2026-10580 · GHSA-5xvj-rcr9-wm4h

Improper authorization in hippooo Hippoo Mobile App for WooCommerce

Priority MEDIUM 54

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1.9.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02948 Published 2026-06-05 No fix listed CWE-285
TI-2026-74369 CVE-2026-108483

Reflected XSS in Hippoo Mobile App for WooCommerce WordPress plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mobile App for WooCommerce hippoo allows Reflected XSS.This issue affects Hippoo Mobile App for WooComm…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00186 Published 2026-10-14 No fix listed CWE-79
TI-2026-76069 CVE-2026-111601 · GHSA-2wvf-fwmx-3fj2

Reflected cross-site scripting in Hippoo Mobile App for WooCommerce

Priority LOW 27

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_id' parameter in all versions up to, and including, 1.12.0 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00226 Published 2026-10-17 No fix listed CWE-79
Open these records in search →