Vulnerabilities

TI-2026-82586 CVE-2026-116866 · GHSA-hmv8-mc55-qxpx

PHP object injection in Dotstore Extra Fees Plugin for WooCommerce

MEDIUM 40

Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00288 Published 2026-10-29 No fix listed CWE-502

TI-2026-63410 CVE-2026-94390 · GHSA-72h6-c42h-mjxr

WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability

LOW 34

Editor PHP Object Injection in Hide Shipping Method For WooCommerce <= 1.5.4 versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00359 Published 2026-10-01 No fix listed CWE-502

TI-2026-63083 CVE-2026-93651 · GHSA-62xx-gw7g-hr87

WordPress Minimum and Maximum Quantity for WooCommerce plugin <= 2.1.2 - PHP Object Injection vulnerability

LOW 34

Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00359 Published 2026-09-30 No fix listed CWE-502

TI-2026-56410 CVE-2026-81774 · GHSA-qhhg-349c-v2j6

WordPress WooCommerce Product Attachment plugin <= 2.3.4 - Sensitive Data Exposure vulnerability

LOW 39

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore WooCommerce Product Attachment woo-product-attachment allows Retrieve Embedded Sensitive Data.This issue affects WooCom…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00416 Published 2026-09-02 No fix listed CWE-497

TI-2026-28640 CVE-2026-39671 · GHSA-fmp6-mwg6-hg78

WordPress Extra Fees Plugin for WooCommerce plugin <= 4.3.3 - Cross Site Request Forgery (CSRF) vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forgery.This issue affects Extra Fees Plugin for WooCommer…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00106 Published 2026-04-08 No fix listed CWE-352

TI-2026-20557 CVE-2026-25443 · GHSA-8j8h-2hvp-g6jh

WordPress Fraud Prevention For Woocommerce plugin <= 2.3.3 - Arbitrary Content Deletion vulnerability

LOW 38

Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Exploiting Incorrectly Configured Access Control Security Levels.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00251 Published 2026-03-19 No fix listed CWE-862

TI-2026-17936 CVE-2026-22354 · GHSA-66q7-4wcm-7r85

WordPress Woocommerce Category Banner Management plugin <= 2.5.1 - PHP Object Injection vulnerability

MEDIUM 41

Deserialization of Untrusted Data vulnerability in Dotstore Woocommerce Category Banner Management banner-management-for-woocommerce allows Object Injection.This issue affects Woocommerce Category Banner Management: from…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00556 Published 2026-02-20 No fix listed CWE-502

TI-2026-19793 CVE-2026-24553 · GHSA-jff8-mh7v-78jj

WordPress Fraud Prevention For Woocommerce plugin <= 2.3.2 - Sensitive Data Exposure vulnerability

LOW 20

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Retrieve Emb…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00255 Published 2026-01-23 No fix listed CWE-497

TI-2025-16576 CVE-2025-22694 · GHSA-2qrh-cw3v-jjq8

WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.1 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Dotstore Hide Shipping Method For WooCommerce hide-shipping-method-for-woocommerce.This issue affects Hide Shipping Method For WooCommerce: from n/a through <= 1.5.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2025-02-03 No fix listed CWE-862

TI-2025-17758 CVE-2025-23991 · GHSA-w6q5-wwh8-6fjf

WordPress Product Size Charts Plugin for WooCommerce plugin <= 2.4.5 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Dotstore Product Size Charts Plugin for WooCommerce woo-advanced-product-size-chart.This issue affects Product Size Charts Plugin for WooCommerce: from n/a through <= 2.4.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00244 Published 2025-01-24 No fix listed CWE-862

TI-2024-36467 CVE-2024-54381 · GHSA-3q74-vrwv-v9x3

WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability

LOW 32

Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through <= 3.1.1.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00464 Published 2024-12-18 No fix listed CWE-862

TI-2024-36316 CVE-2024-54227 · GHSA-pvcx-grh4-qwx5

WordPress Minimum and Maximum Quantity for WooCommerce plugin <= 2.0.0 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Dotstore Minimum and Maximum Quantity for WooCommerce min-and-max-quantity-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00394 Published 2024-12-09 No fix listed CWE-862

Vulnerabilities

Filters