| CVE-2025-39563 | WordPress Conditional Payments for WooCommerce plugin <= 3.3.0 - Cross Site Request Forgery (CSRF) Vulnerability | WP Trio | Conditional Payments for WooCommerce | Medium | 6.5 | 2025-04-16 12:44:33 | Deep Dive |
| CVE-2025-39564 | WordPress Conditional Shipping for WooCommerce plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) Vulnerability | WP Trio | Conditional Shipping for WooCommerce | Medium | 6.5 | 2025-04-16 12:44:32 | Deep Dive |
| CVE-2025-39579 | WordPress Membership For WooCommerce plugin <= 2.8.0 - Cross Site Scripting (XSS) Vulnerability | WP Swings | Membership For WooCommerce | Medium | 6.5 | 2025-04-16 12:44:25 | Deep Dive |
| CVE-2025-39600 | WordPress Integration for WooCommerce and QuickBooks plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) Vulnerability | CRM Perks | Integration for WooCommerce and QuickBooks | Medium | 4.3 | 2025-04-16 12:44:16 | Deep Dive |
| CVE-2025-39602 | WordPress WooCommerce Product Table Lite plugin <= 3.9.5 - Broken Access Control vulnerability | WC Product Table | WooCommerce Product Table Lite | Medium | 4.3 | 2025-04-16 12:44:15 | Deep Dive |
| CVE-2025-26749 | WordPress Additional Custom Product Tabs for WooCommerce plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability | WPFactory | Additional Custom Product Tabs for WooCommerce | Medium | 6.5 | 2025-04-15 21:53:11 | Deep Dive |
| CVE-2025-32929 | WordPress Barcode Generator for WooCommerce plugin <= 2.0.4 - Arbitrary Content Deletion vulnerability | Dmitry V. (CEO of "UKR Solution") | Barcode Generator for WooCommerce | High | 7.5 | 2025-04-15 11:58:10 | Deep Dive |
| CVE-2025-32631 | WordPress Oxygen MyData for WooCommerce plugin <= 1.0.64 - Arbitrary File Deletion vulnerability | oxygensuite | Oxygen MyData for WooCommerce | High | 8.6 | 2025-04-11 08:43:01 | Deep Dive |
| CVE-2025-32587 | WordPress WooCommerce Pickupp plugin <= 2.4.3 - Local File Inclusion vulnerability | pickupp | WooCommerce Pickupp | High | 8.1 | 2025-04-11 08:42:58 | Deep Dive |
| CVE-2025-32586 | WordPress ABA PayWay Payment Gateway for WooCommerce Plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability | ABA Bank | ABA PayWay Payment Gateway for WooCommerce | High | 7.1 | 2025-04-11 08:42:58 | Deep Dive |
| CVE-2025-32568 | WordPress EmpikPlace for Woocommerce Plugin <= 1.4.3 - PHP Object Injection vulnerability | empik | EmpikPlace for Woocommerce | Critical | 9.8 | 2025-04-11 08:42:57 | Deep Dive |
| CVE-2025-32541 | WordPress WooCommerce Sales MIS Report Plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability | infosoftplugin | WooCommerce Sales MIS Report | High | 7.1 | 2025-04-11 08:42:55 | Deep Dive |
| CVE-2025-32524 | WordPress MyWorks WooCommerce Sync for QuickBooks Online plugin <= 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerability | MyWorks | MyWorks WooCommerce Sync for QuickBooks Online | High | 7.1 | 2025-04-11 08:42:53 | Deep Dive |
| CVE-2025-32523 | WordPress WooCommerce – Payphone Gateway plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability | payphone | WooCommerce – Payphone Gateway | High | 7.1 | 2025-04-11 08:42:53 | Deep Dive |
| CVE-2025-31411 | WordPress Linet ERP-Woocommerce Integration plugin <= 3.5.12 - Arbitrary File Read/Deletion vulnerability | aribhour | Linet ERP-Woocommerce Integration | Medium | 5.9 | 2025-04-10 10:16:12 | Deep Dive |
| CVE-2025-32236 | WordPress Woocommerce Products Reorder Drag Drop Multiple Sort plugin <= 1.9 - Broken Access Control vulnerability | Vagonic | Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic | Medium | 4.3 | 2025-04-10 08:09:47 | Deep Dive |
| CVE-2025-32119 | WordPress CardGate Payments for WooCommerce plugin <= 3.2.1 - SQL Injection vulnerability | CardGate | CardGate Payments for WooCommerce | - | - | 2025-04-10 08:09:42 | Deep Dive |
| CVE-2025-32687 | WordPress Review Stars Count For WooCommerce plugin <= 2.0 - SQL Injection Vulnerability | Magnigenie | Review Stars Count For WooCommerce | High | 8.5 | 2025-04-10 08:09:41 | Deep Dive |
| CVE-2025-2719 | Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update | hasthemes | Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) | Medium | 6.5 | 2025-04-10 07:02:40 | Deep Dive |
| CVE-2025-26888 | WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerability | Amir Helzer | WooCommerce Multilingual & Multicurrency | Medium | 5.3 | 2025-04-09 19:35:43 | Deep Dive |