Skip to content
OpenAdvisories

Vendor

Techspawn

5 known vulnerabilities.

Products

MultiLoca - WooCommerce Multi Locations Inventory Management 2 WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce 1 MultiLoca 1 Distance Rate Shipping for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.6
    CVE-2026-39546

    WordPress MultiLoca plugin <= 4.2.15 - Privilege Escalation vulnerability

    Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions.

    Techspawn MultiLoca
  • Critical 9.8
    CVE-2025-9054

    MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler'

    The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'wcmlim_settings_ajax_handler' function in …

    Techspawn MultiLoca - WooCommerce Multi Locations Inventory Management Web / CMS
  • Critical 9.3
    CVE-2025-31056

    WordPress WhatsCart plugin <= 1.1.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Techspawn WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce WhatsCart-for-WooCommerce allows SQL Injection.Thi…

    Techspawn WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce Web / CMS
  • High 8.5
    CVE-2025-22639

    WordPress Distance Rate Shipping for WooCommerce plugin <= 1.3.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Techspawn Distance Rate Shipping for WooCommerce distance-rate-shipping-for-woocommerce-pro allows Blind SQL Injection.This issue affects Distance Rate Shipp…

    Techspawn Distance Rate Shipping for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2024-13341

    MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.1.11 - Authenticated (Subscriber+) SQL Injection

    The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to insufficient escaping on the user supplied parameter and lack …

    Techspawn MultiLoca - WooCommerce Multi Locations Inventory Management Web / CMS