Skip to content
OpenAdvisories

Vendor

WP Wham

12 known vulnerabilities.

WP Wham at a glance

Last 12 months
3
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 1 vulnerability
Show as table
MonthVulnerabilitiesCritical
Nov 202610
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202610
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202510
Oct 202500
Sep 202500
Aug 202500
Jul 202510
Jun 202510
May 202500
Apr 202530
Mar 202520
Feb 202500
Jan 202500
Dec 202400

Products

Checkout Files Upload for WooCommerce 4 Crowdfunding for WooCommerce 2 SKU Generator for WooCommerce 2 Currency Switcher for WooCommerce 1 Checkout Files Upload for WooCommerce (WordPress plugin) 1 All Currencies for WooCommerce 1 Product Visibility by Country for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • High 7.1
    CVE-2026-123463

    WordPress Checkout Files Upload for WooCommerce plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Stored XSS.This issue affects Checkout Files Upload for WooCommerce: f…

    WP Wham Checkout Files Upload for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2026-42725

    WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Files Upload …

    WP Wham Checkout Files Upload for WooCommerce Web / CMS
  • High 7.2
    CVE-2025-4212

    Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting

    The Checkout Files Upload for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for una…

    WP Wham Checkout Files Upload for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2025-5767

    Crowdfunding for WooCommerce <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter

    The Crowdfunding for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 3.1.14 due to insufficient input sanitization and output escaping. This makes it possible for au…

    WP Wham Crowdfunding for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2025-30950

    WordPress All Currencies for WooCommerce plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham All Currencies for WooCommerce woocommerce-all-currencies allows Stored XSS.This issue affects All Currencies for WooCommerce: from n/a through <= 2.…

    WP Wham All Currencies for WooCommerce Web / CMS
  • High 7.1
    CVE-2025-32628

    WordPress Crowdfunding for WooCommerce Plugin <= 3.1.12 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Crowdfunding for WooCommerce crowdfunding-for-woocommerce allows Reflected XSS.This issue affects Crowdfunding for WooCommerce: from n/a through <= 3…

    WP Wham Crowdfunding for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2025-39520

    WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Stored XSS.This issue affects Checkout Files Upload for WooCommerce: f…

    WP Wham Checkout Files Upload for WooCommerce Web / CMS
  • High 7.1
    CVE-2025-30917

    WordPress SKU Generator for WooCommerce plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham SKU Generator for WooCommerce sku-for-woocommerce allows Reflected XSS.This issue affects SKU Generator for WooCommerce: from n/a through <= 1.6.2.

    WP Wham SKU Generator for WooCommerce Web / CMS
  • Medium 6.1
    CVE-2024-9212

    SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting

    The SKU Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.6.2. This makes it possible for unauthentica…

    WP Wham SKU Generator for WooCommerce Web / CMS
  • Medium 6.1
    CVE-2024-9217

    Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting

    The Currency Switcher for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.16.2. This makes it possible for unauthe…

    WP Wham Currency Switcher for WooCommerce Web / CMS
  • Medium 5.9
    CVE-2023-47660

    WordPress Product Visibility by Country for WooCommerce Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Wham Product Visibility by Country for WooCommerce plugin <= 1.4.9 versions.

    WP Wham Product Visibility by Country for WooCommerce Web / CMS
  • Medium 6.1
    CVE-2022-29425

    WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability

    Cross-Site Scripting (XSS) vulnerability in WP Wham's Checkout Files Upload for WooCommerce plugin <= 2.1.2 at WordPress.

    WP Wham Checkout Files Upload for WooCommerce (WordPress plugin) Web / CMS