Vulnerabilities

TI-2026-36298 CVE-2026-49072 · GHSA-4642-828p-9jq3

WordPress WooCommerce Anti-Fraud plugin <= 7.2.6 - Broken Access Control vulnerability

LOW 35

Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00309 Published 2026-06-17 No fix listed CWE-862

TI-2026-36297 CVE-2026-49071 · GHSA-jxhw-2h3q-q447

WordPress WooCommerce Dropshipping plugin <= 5.2.4 - Broken Authentication vulnerability

LOW 35

Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00305 Published 2026-06-17 No fix listed CWE-288

TI-2024-23617 CVE-2024-35748 · GHSA-w6j7-7mmx-4w74

WordPress WooCommerce Dropshipping plugin <= 5.0.4 - Unauthenticated Arbitrary Email Sending vulnerability

LOW 24

Missing Authorization vulnerability in OPMC WooCommerce Dropshipping.This issue affects WooCommerce Dropshipping: from n/a through 5.0.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2024-06-09 No fix listed CWE-862

TI-2022-03213 CVE-2022-3481 · GHSA-m4wm-6gf3-2xqw

WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi

HIGH 82

The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05296 Published 2022-11-07 Fixed in 4.4 CWE-89

Vulnerabilities

Filters

WordPress WooCommerce Anti-Fraud plugin <= 7.2.6 - Broken Access Control vulnerability

WordPress WooCommerce Dropshipping plugin <= 5.2.4 - Broken Authentication vulnerability

WordPress WooCommerce Dropshipping plugin <= 5.0.4 - Unauthenticated Arbitrary Email Sending vulnerability

WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi