Skip to content
OpenAdvisories

Vendor

wpcraft

3 known vulnerabilities.

Products

WooMS 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-57956

    WordPress WooMS Plugin <= 9.12 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpcraft WooMS wooms allows Stored XSS.This issue affects WooMS: from n/a through <= 9.12.

    wpcraft WooMS
  • Medium 5.3
    CVE-2025-57957

    WordPress WooMS Plugin <= 9.12 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in wpcraft WooMS wooms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooMS: from n/a through <= 9.12.

    wpcraft WooMS