Vulnerabilities in StoreApps
10 resultsCVE-2025-22710HIGHWordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerabilityEPSS 0.8%CVE-2023-5663HIGHNews Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via ShortcodeEPSS 0.8%CVE-2021-34619HIGHCross-Site Request Forgery in WooCommerce Stock Manager WordPress PluginEPSS 0.7%CVE-2022-25649MEDIUMWordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilitiesEPSS 0.7%CVE-2022-36284MEDIUMWordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email changeEPSS 0.5%CVE-2022-40694MEDIUMWordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-45216HIGHWordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2024-49687MEDIUMWordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-35091MEDIUMWordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-24365MEDIUMWordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%