Skip to content
OpenAdvisories

Vendor

hippooo

6 known vulnerabilities.

Products

Hippoo Mobile App for WooCommerce 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-10580 Public exploit Scanner template

    Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API

    The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1.9.4. This is due to a logic conflation in HippooPermissions::get_user_permissions…

    hippooo Hippoo Mobile App for WooCommerce Web / CMS