wpcodefactory vulnerabilities

CVEs per yearBy the year they were published

1. 202414
2. 20255
3. 20265

Newest CVEs

• CVE-2026-104745

  Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter

  wpcodefactory · Customer Email Verification for WooCommerce

  High8.1
• CVE-2026-11399

  Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter

  wpcodefactory · Helpdesk Support Ticket System for WooCommerce

  Medium4.3
• CVE-2026-6962

  Cost of Goods: Product Cost & Profit Calculator for WooCommerce <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpcodefactory · Cost of Goods: Product Cost & Profit Calculator for WooCommerce

  Medium6.4
• CVE-2026-4479

  WholeSale Products Dynamic Pricing Management WooCommerce <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings

  wpcodefactory · WholeSale Products Dynamic Pricing Management WooCommerce

  Medium4.4
• CVE-2026-1381

  Order Minimum/Maximum Amount Limits for WooCommerce <= 4.6.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Hide Add to Cart Content Fields

  wpcodefactory · Order Minimum/Maximum Amount Limits for WooCommerce

  Medium4.4
• CVE-2025-14399

  Download Plugins and Themes from Dashboard <= 1.9.6 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival

  wpcodefactory · Download Plugins and Themes in ZIP from Dashboard

  Medium4.3
• CVE-2025-10167

  Stock History & Reports Manager for WooCommerce <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpcodefactory · Stock History & Reports Manager for WooCommerce

  Medium6.4
• CVE-2024-13774

  Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name

  wpcodefactory · Wishlist for WooCommerce: Multi Wishlists Per Customer

  Medium6.1
• CVE-2024-13525

  Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure

  wpcodefactory · Customer Email Verification for WooCommerce

  Medium6.5
• CVE-2024-13528

  Customer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via Shortcode

  wpcodefactory · Customer Email Verification for WooCommerce

  High7.5