| CVE-2025-32522 | WordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability | Saad Iqbal | License Manager for WooCommerce | High | 7.1 | 2025-04-17 15:47:42 | Deep Dive |
| CVE-2025-32530 | WordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability | WP Swings | Wallet System for WooCommerce | High | 7.1 | 2025-04-17 15:47:39 | Deep Dive |
| CVE-2025-32533 | WordPress Deliver via Shipos for WooCommerce Plugin <= 2.1.7 - Reflected Cross Site Scripting (XSS) vulnerability | Matat Technologies | Deliver via Shipos for WooCommerce | High | 7.1 | 2025-04-17 15:47:37 | Deep Dive |
| CVE-2025-32535 | WordPress DN Shipping by Weight for WooCommerce Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability | digireturn | DN Shipping by Weight for WooCommerce | High | 7.1 | 2025-04-17 15:47:36 | Deep Dive |
| CVE-2025-32544 | WordPress WooCommerce Loyal Customers plugin <= 2.6 - Broken Access Control vulnerability | The Right Software | WooCommerce Loyal Customers | High | 7.5 | 2025-04-17 15:47:35 | Deep Dive |
| CVE-2025-32545 | WordPress WooCommerce Products without featured images Plugin <= 0.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability | SOFTAGON | WooCommerce Products without featured images | - | - | 2025-04-17 15:47:34 | Deep Dive |
| CVE-2025-32552 | WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability | WPFactory | MSRP (RRP) Pricing for WooCommerce | High | 7.1 | 2025-04-17 15:47:32 | Deep Dive |
| CVE-2025-32593 | WordPress Add Product Frontend for WooCommerce plugin <= 1.0.8 - Arbitrary Content Deletion vulnerability | Bytes Technolab | Add Product Frontend for WooCommerce | High | 8.2 | 2025-04-17 15:47:22 | Deep Dive |
| CVE-2025-32611 | WordPress WooCommerce TBC Credit Card Payment Gateway (Free) Plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability | We Are De | WooCommerce TBC Credit Card Payment Gateway (Free) | High | 7.1 | 2025-04-17 15:47:17 | Deep Dive |
| CVE-2025-32628 | WordPress Crowdfunding for WooCommerce Plugin <= 3.1.12 - Reflected Cross Site Scripting (XSS) vulnerability | WP Wham | Crowdfunding for WooCommerce | High | 7.1 | 2025-04-17 15:47:12 | Deep Dive |
| CVE-2025-32638 | WordPress ShopApper plugin <= 0.4.61 - Cross Site Scripting (XSS) vulnerability | weptile | Mobile App for WooCommerce | High | 7.1 | 2025-04-17 15:47:09 | Deep Dive |
| CVE-2025-32674 | WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability | WPFactory | Product Excel Import Export & Bulk Edit for WooCommerce | High | 7.1 | 2025-04-17 15:46:59 | Deep Dive |
| CVE-2025-39559 | WordPress Bring Fraktguiden for WooCommerce plugin <= 1.11.4 - Broken Access Control vulnerability | Eivin Landa | Bring Fraktguiden for WooCommerce | Medium | 6.5 | 2025-04-17 15:46:50 | Deep Dive |
| CVE-2025-39568 | WordPress StoreContrl Woocommerce plugin <= 4.1.3 - Arbitrary File Download Vulnerability | Arture B.V. | StoreContrl Woocommerce | High | 7.5 | 2025-04-17 15:46:48 | Deep Dive |
| CVE-2025-39453 | WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.9.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability | algol.plus | Advanced Dynamic Pricing for WooCommerce | Medium | 4.3 | 2025-04-17 15:15:42 | Deep Dive |
| CVE-2025-3453 | Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure | saadiqbal | Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content | Medium | 5.3 | 2025-04-17 11:13:05 | Deep Dive |
| CVE-2024-13925 | Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging | Unknown | Klarna Checkout for WooCommerce | - | - | 2025-04-17 06:00:09 | Deep Dive |
| CVE-2025-39472 | WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability | wpweb | WooCommerce Social Login | Medium | 4.3 | 2025-04-16 17:15:50 | Deep Dive |
| CVE-2025-39520 | WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability | WP Wham | Checkout Files Upload for WooCommerce | Medium | 6.5 | 2025-04-16 12:45:50 | Deep Dive |
| CVE-2025-39557 | WordPress Kadence WooCommerce Email Designer plugin <= 1.5.14 - Arbitrary File Upload vulnerability | StellarWP | Kadence WooCommerce Email Designer | Critical | 9.1 | 2025-04-16 12:44:34 | Deep Dive |