Extension WordPress
Vulnérabilités WowStore – Store Builder & Product Blocks for WooCommerce
Cette page rassemble les failles publiées pour WowStore – Store Builder & Product Blocks for WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WowStore – Store Builder & Product Blocks for WooCommerce
5 fiches
WowStore – Store Builder & Product Blocks for WooCommerce <= 4.4.3 – Unauthenticated SQL Injection via 'search' Parameter
The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the ‘search’ parameter in all versions up to, and including, 4.4.3 due to insufficient escaping on the user supplied…
*-4.4.3
4.4.4
16/03/2026
WowStore <= 4.2.4 – Missing Authorization
The WooCommerce Builder & Gutenberg WooCommerce Blocks – WowStore plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.2.4. This makes it possible…
*-4.2.4
4.2.5
16/04/2025
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks <= 3.1.4 – PHP Object Injection via wopb_wishlist and wopb_compare
The ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.4 via deserialization of untrusted input from the 'wopb_wishlist' and 'wopb_compare' cookies. This…
*-3.1.4
3.1.5
30/01/2024
ProductX – Gutenberg WooCommerce Blocks <= 2.7.8 – Missing Authorization via option_data_save
The ProductX – Gutenberg WooCommerce Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the option_data_save function in versions up to, and including, 2.7.8. This makes it possible for…
*-2.7.8
3.0.0
06/10/2023
ProductX – Gutenberg WooCommerce Blocks – WooCommerce Builder, Wishlist for WooCommerce, Products Comparison, Quick View, Online Store – All in One Solution <= 2.2.5 – Multiple Cross-Site Scripting
ProductX – Gutenberg WooCommerce Blocks – WooCommerce Builder, Wishlist for WooCommerce, Products Comparison, Quick View, Online Store – All in One Solution in versions up to and including 2.2.5 is vulnerable to Cross-Site Scripting due to insufficient sanitization…
*-2.2.5
2.2.6
22/05/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.