Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Addonify Clear all filters
TI-2025-41634 CVE-2025-68025 · GHSA-qx85-r5h6-jm6f

WordPress Addonify Floating Cart For WooCommerce plugin <= 1.2.17 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify Floating C…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00285 Published 2026-02-20 No fix listed CWE-862
TI-2025-41633 CVE-2025-68024 · GHSA-mgwj-pxgv-5r8r

WordPress Addonify – WooCommerce Wishlist plugin <= 2.0.15 - Settings Change vulnerability

Priority LOW 35

Missing Authorization vulnerability in Addonify Addonify – WooCommerce Wishlist addonify-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify – WooCommerce Wishlist…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00285 Published 2026-02-20 No fix listed CWE-862
TI-2025-41632 CVE-2025-68023 · GHSA-63pr-8qvw-vfv9

WordPress Addonify – Compare Products For WooCommerce plugin <= 1.1.17 - Settings Change vulnerability

Priority LOW 35

Missing Authorization vulnerability in Addonify Addonify – Compare Products For WooCommerce addonify-compare-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify –…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00375 Published 2026-02-20 No fix listed CWE-862
TI-2025-42099 CVE-2025-68578 · GHSA-m9jp-fv72-2g3f

WordPress Addonify plugin <= 2.0.4 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify: from n/a through <= 2.0.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00254 Published 2025-12-24 No fix listed CWE-862