Skip to content
OpenAdvisories

Vendor

Dotstore

13 known vulnerabilities.

Products

Extra Fees Plugin for WooCommerce 2 Fraud Prevention For Woocommerce 2 Hide Shipping Method For WooCommerce 2 Minimum and Maximum Quantity for WooCommerce 2 Woocommerce Category Banner Management 1 Advanced Linked Variations for Woocommerce 1 Advance Menu Manager 1 WooCommerce Product Attachment 1 Product Size Charts Plugin for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2026-116866

    WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability

    Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.

    Dotstore Extra Fees Plugin for WooCommerce Web / CMS
  • High 7.2
    CVE-2026-94390

    WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability

    Editor PHP Object Injection in Hide Shipping Method For WooCommerce <= 1.5.4 versions.

    Dotstore Hide Shipping Method For WooCommerce Web / CMS
  • High 7.2
    CVE-2026-93651

    WordPress Minimum and Maximum Quantity for WooCommerce plugin <= 2.1.2 - PHP Object Injection vulnerability

    Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions.

    Dotstore Minimum and Maximum Quantity for WooCommerce Web / CMS
  • High 7.5
    CVE-2026-81774

    WordPress WooCommerce Product Attachment plugin <= 2.3.4 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore WooCommerce Product Attachment woo-product-attachment allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Product Attachment: from n/a thro…

    Dotstore WooCommerce Product Attachment Web / CMS
  • High 7.1
    CVE-2026-39671

    WordPress Extra Fees Plugin for WooCommerce plugin <= 4.3.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forgery.This issue affects Extra Fees Plugin for WooCommerce: from n/a through <= 4.3.3.

    Dotstore Extra Fees Plugin for WooCommerce Web / CMS
  • High 7.5
    CVE-2026-25443

    WordPress Fraud Prevention For Woocommerce plugin <= 2.3.3 - Arbitrary Content Deletion vulnerability

    Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fraud Prevention For…

    Dotstore Fraud Prevention For Woocommerce Web / CMS
  • High 8.8
    CVE-2026-22354

    WordPress Woocommerce Category Banner Management plugin <= 2.5.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Dotstore Woocommerce Category Banner Management banner-management-for-woocommerce allows Object Injection.This issue affects Woocommerce Category Banner Management: from n/a through <= 2.5.1.

    Dotstore Woocommerce Category Banner Management Web / CMS
  • High 7.1
    CVE-2024-54381

    WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability

    Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through <= 3.1.1.

    Dotstore Advance Menu Manager