Skip to content
OpenAdvisories

Vendor

Mestres do WP

6 known vulnerabilities.

Products

Checkout Mestres WP 5 Checkout Mestres do WP for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-32695

    WordPress Checkout Mestres WP plugin <= 8.7.5 - Privilege Escalation Vulnerability

    Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through <= 8.7.5.

    Mestres do WP Checkout Mestres WP
  • Critical 9.8
    CVE-2025-2266 Public exploit

    Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update

    The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions() function in versions 8.6.5 to 8.7.5. This mak…

    Mestres do WP Checkout Mestres do WP for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2023-51472

    WordPress Checkout Mestres WP plugin <= 7.1.9.7 - Unauthenticated Account Takeover vulnerability

    Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through 7.1.9.7.

    Mestres do WP Checkout Mestres WP
  • Critical 9.3
    CVE-2023-51469

    WordPress Checkout Mestres WP Plugin <= 7.1.9.6 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mestres do WP Checkout Mestres WP.This issue affects Checkout Mestres WP: from n/a through 7.1.9.6.

    Mestres do WP Checkout Mestres WP