StoreApps vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20223
3. 20231
4. 20242
5. 20251
6. 20264

Newest CVEs

• CVE-2026-18443

  Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter

  storeapps · Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet)

  High8.8
• CVE-2026-57704

  WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerability

  StoreApps · Smart Manager

  High7.1
• CVE-2026-45216

  WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability

  StoreApps · Smart Manager

  High8.8
• CVE-2026-24365

  WordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cross Site Request Forgery (CSRF) vulnerability

  storeapps · Stock Manager for WooCommerce

  Medium5.4
• CVE-2025-22710

  WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability

  storeapps · Smart Manager

  High7.6
• CVE-2024-49687

  WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerability

  storeapps · Smart Manager

  Medium4.3
• CVE-2023-5663

  News Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcode

  storeapps · News Announcement Scroll

  High8.8
• CVE-2023-35091

  WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF)

  StoreApps · Stock Manager for WooCommerce

  Medium4.3
• CVE-2022-40694

  WordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

  StoreApps · News Announcement Scroll (WordPress plugin)

  Medium4.8
• CVE-2022-36284

  WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change

  StoreApps · Affiliate For WooCommerce (WordPress plugin)

  Medium6.4