Skip to content
OpenAdvisories

Vendor

hippooo

6 known vulnerabilities.

Products

Hippoo Mobile App for WooCommerce 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-10580 Public exploit

    Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API

    The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1.9.4. This is due to a logic conflation in HippooPermissions::get_user_permissions…

    hippooo Hippoo Mobile App for WooCommerce Web / CMS
  • High 7.5
    CVE-2025-13339 Public exploit

    Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read

    The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.1 via the template_redirect() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary…

    hippooo Hippoo Mobile App for WooCommerce Web / CMS