WordPress and WooCommerce Plugin Vulnerabilities

Most WordPress vulnerabilities are found in plugins, not the core. This page collects fresh vulnerabilities in plugins and WooCommerce extensions: for each one you see the affected versions, how to check your site and what to update. If a plugin is visible from outside, Shield detects its version when it checks your site.

All 92 Articles 49 News 43 Threats 30
All notes ✅ Checked by Shield · Checked only Check your site in Shield
What the badges mean
✅ Checked by Shield Shield already looks for this in site checks: it will find it and show it in the report.
⏳ Not checked yet Not visible from outside yet, or not added to the checks: check it yourself using the note.
Check your site in Shield →
October 25, 2026 🔴 Critical ✅ Checked by Shield
Booster for WooCommerce: customer arbitrary file upload (CVE-2026-56027)
October 25, 2026 🔴 Critical ✅ Checked by Shield
BuddyBoss Platform: Subscriber PHP Object Injection (CVE-2026-56032)
October 24, 2026 🔴 Critical ✅ Checked by Shield
WooCommerce Product Filters: unauthenticated PHP Object Injection (CVE-2026-40725)
October 24, 2026 🔴 Critical ✅ Checked by Shield
Aimogen Pro: unauthenticated privilege escalation (CVE-2026-15982)
October 23, 2026 🔴 Critical ✅ Checked by Shield
Active Products Tables for WooCommerce: unauthenticated SQL injection (CVE-2026-66436)
October 23, 2026 🔴 Critical ✅ Checked by Shield
Forminator Forms: arbitrary file upload (CVE-2026-15748)
October 23, 2026 🔴 Critical ✅ Checked by Shield
Thrive Apprentice: unauthenticated PHP object injection (CVE-2026-49107)
Free · no sign-up

How many clicks is your site missing?

The SEO Radar shows in a minute which pages sit near the top of Google and what keeps them from moving up.

An estimate from positions, not a promise
First publication freeA link on a trusted site after sign-up. Cascades from $30.Claim ShieldCheck your site for hacks and malicious code.Check Keyword StudioQueries, volumes and clusters for your article.Open AppProjects and reports in your pocket, iOS and Android.Download
SEO tools
SEO Audit Backlinks Trust Speed AI Detector Humanizer All 120+
New articles by email