Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: hippooo Clear all filters
TI-2026-76069 CVE-2026-111601 · GHSA-2wvf-fwmx-3fj2

Reflected cross-site scripting in Hippoo Mobile App for WooCommerce

Priority LOW 27

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_id' parameter in all versions up to, and including, 1.12.0 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00226 Published 2026-10-17 No fix listed CWE-79
TI-2026-74369 CVE-2026-108483

Reflected XSS in Hippoo Mobile App for WooCommerce WordPress plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mobile App for WooCommerce hippoo allows Reflected XSS.This issue affects Hippoo Mobile App for WooComm…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00186 Published 2026-10-14 No fix listed CWE-79
TI-2026-09098 CVE-2026-10580 · GHSA-5xvj-rcr9-wm4h

Improper authorization in hippooo Hippoo Mobile App for WooCommerce

Priority MEDIUM 54

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1.9.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02948 Published 2026-06-05 No fix listed CWE-285