Skip to content
OpenAdvisories

Vendor

WP Wham

12 known vulnerabilities.

Products

Checkout Files Upload for WooCommerce 4 Crowdfunding for WooCommerce 2 SKU Generator for WooCommerce 2 Currency Switcher for WooCommerce 1 Checkout Files Upload for WooCommerce (WordPress plugin) 1 All Currencies for WooCommerce 1 Product Visibility by Country for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-42725

    WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Files Upload …

    WP Wham Checkout Files Upload for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2025-5767

    Crowdfunding for WooCommerce <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter

    The Crowdfunding for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 3.1.14 due to insufficient input sanitization and output escaping. This makes it possible for au…

    WP Wham Crowdfunding for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2025-30950

    WordPress All Currencies for WooCommerce plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham All Currencies for WooCommerce woocommerce-all-currencies allows Stored XSS.This issue affects All Currencies for WooCommerce: from n/a through <= 2.…

    WP Wham All Currencies for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2025-39520

    WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Stored XSS.This issue affects Checkout Files Upload for WooCommerce: f…

    WP Wham Checkout Files Upload for WooCommerce Web / CMS
  • Medium 6.1
    CVE-2024-9212

    SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting

    The SKU Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.6.2. This makes it possible for unauthentica…

    WP Wham SKU Generator for WooCommerce Web / CMS
  • Medium 6.1
    CVE-2024-9217

    Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting

    The Currency Switcher for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.16.2. This makes it possible for unauthe…

    WP Wham Currency Switcher for WooCommerce Web / CMS
  • Medium 5.9
    CVE-2023-47660

    WordPress Product Visibility by Country for WooCommerce Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Wham Product Visibility by Country for WooCommerce plugin <= 1.4.9 versions.

    WP Wham Product Visibility by Country for WooCommerce Web / CMS
  • Medium 6.1
    CVE-2022-29425

    WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability

    Cross-Site Scripting (XSS) vulnerability in WP Wham's Checkout Files Upload for WooCommerce plugin <= 2.1.2 at WordPress.

    WP Wham Checkout Files Upload for WooCommerce (WordPress plugin) Web / CMS