Skip to content
OpenAdvisories

Vendor

StoreApps

12 known vulnerabilities.

Products

Smart Manager 4 Stock Manager for WooCommerce 2 Affiliate For WooCommerce (WordPress plugin) 2 Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) 1 WooCommerce Stock Manager 1 News Announcement Scroll 1 News Announcement Scroll (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-24365

    WordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in storeapps Stock Manager for WooCommerce woocommerce-stock-manager allows Cross Site Request Forgery.This issue affects Stock Manager for WooCommerce: from n/a through < 3.6.0.

    StoreApps Stock Manager for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-49687

    WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through <= 8.45.0.

    StoreApps Smart Manager
  • Medium 4.3
    CVE-2023-35091

    WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in StoreApps Stock Manager for WooCommerce plugin <= 2.10.0 versions.

    StoreApps Stock Manager for WooCommerce Web / CMS
  • Medium 4.8
    CVE-2022-40694

    WordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in News Announcement Scroll plugin <= 8.8.8 on WordPress.

    StoreApps News Announcement Scroll (WordPress plugin) Web / CMS
  • Medium 6.4
    CVE-2022-36284

    WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change

    Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin (free) should be at least installed to get the extra input field on …

    StoreApps Affiliate For WooCommerce (WordPress plugin) Web / CMS
  • Medium 5.0
    CVE-2022-25649

    WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities

    Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.

    StoreApps Affiliate For WooCommerce (WordPress plugin) Web / CMS