E-commerce

In Ultimate Gift Cards For WooCommerce component for WooCommerce versions 3.2.9 and earlier a medium severity vulnerability CVE-2026-84760 was detected. This vulnerability allows unauthenticated attackers to gain unauthorized access to restricted functionalities. To address this issue, users should upgrade Ultimate Gift Cards For WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-84760.

In WooCommerce Product Attachment component for WooCommerce versions 2.3.3 and earlier a high severity vulnerability CVE-2026-81774 was detected. This vulnerability allows attackers to expose sensitive data. To address this issue, users should upgrade WooCommerce Product Attachment to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-81774.

In Upsell Order Bump Offer for WooCommerce component for WooCommerce versions 3.1.5 and earlier a high severity vulnerability CVE-2026-81288 was detected. This vulnerability allows unauthenticated attackers to perform Cross-Site Scripting attacks. To address this issue, users should upgrade Upsell Order Bump Offer for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-81288.

In Music Player for WooCommerce component for WooCommerce versions 1.8.9 and earlier a high severity vulnerability CVE-2026-78283 was detected. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Music Player for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-78283.

In Mobile App for WooCommerce component for WooCommerce versions 0.4.62 and earlier a high severity vulnerability CVE-2026-27330 was detected. This vulnerability allows unauthenticated attackers to gain unauthorized access to the application. To address this issue, users should upgrade Mobile App for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-27330.

In ShopBuilder Pro – Elementor WooCommerce Builder Addons component for WooCommerce versions 2.2.0 and earlier a high severity vulnerability CVE-2026-32477 was detected. This vulnerability allows unauthenticated attackers to delete arbitrary files on the server. To address this issue, users should upgrade ShopBuilder Pro – Elementor WooCommerce Builder Addons to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-32477.

In WooCommerce File Approval component for WooCommerce versions 10.7 and earlier a high severity vulnerability CVE-2026-28171 was detected. This vulnerability allows an unauthenticated attacker to arbitrarily delete files. To address this issue, users should upgrade WooCommerce File Approval to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-28171.

In YITH WooCommerce Membership Premium component for WooCommerce versions 2.33.0 and earlier a high severity vulnerability CVE-2026-32552 was detected. This vulnerability allows attackers to execute arbitrary SQL commands. To address this issue, users should upgrade YITH WooCommerce Membership Premium to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-32552.

In Taxi Booking Manager for WooCommerce component for WooCommerce versions before 2.0.8 a medium severity vulnerability CVE-2026-73363 was detected. This vulnerability allows unauthenticated attackers to bypass access controls. To address this issue, users should upgrade Taxi Booking Manager for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-73363.