Skip to content
OpenAdvisories

Vendor

WP Wham

12 known vulnerabilities.

Products

Checkout Files Upload for WooCommerce 4 Crowdfunding for WooCommerce 2 SKU Generator for WooCommerce 2 Currency Switcher for WooCommerce 1 Checkout Files Upload for WooCommerce (WordPress plugin) 1 All Currencies for WooCommerce 1 Product Visibility by Country for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-123463

    WordPress Checkout Files Upload for WooCommerce plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Stored XSS.This issue affects Checkout Files Upload for WooCommerce: f…

    WP Wham Checkout Files Upload for WooCommerce Web / CMS
  • High 7.2
    CVE-2025-4212

    Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting

    The Checkout Files Upload for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for una…

    WP Wham Checkout Files Upload for WooCommerce Web / CMS
  • High 7.1
    CVE-2025-32628

    WordPress Crowdfunding for WooCommerce Plugin <= 3.1.12 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Crowdfunding for WooCommerce crowdfunding-for-woocommerce allows Reflected XSS.This issue affects Crowdfunding for WooCommerce: from n/a through <= 3…

    WP Wham Crowdfunding for WooCommerce Web / CMS
  • High 7.1
    CVE-2025-30917

    WordPress SKU Generator for WooCommerce plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham SKU Generator for WooCommerce sku-for-woocommerce allows Reflected XSS.This issue affects SKU Generator for WooCommerce: from n/a through <= 1.6.2.

    WP Wham SKU Generator for WooCommerce Web / CMS