Skip to content
OpenAdvisories

Vendor

wpgenie

3 known vulnerabilities.

Products

WooCommerce Lottery 2 WooCommerce Simple Auctions 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-42635

    WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions.

    wpgenie WooCommerce Simple Auctions Web / CMS
  • High 7.5
    CVE-2026-32580

    WordPress WooCommerce Lottery plugin <= 2.2.9 - SQL Injection vulnerability

    Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.

    wpgenie WooCommerce Lottery Web / CMS
  • High 7.5
    CVE-2026-18884

    WooCommerce Lottery <= 2.2.9 - Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters

    The WooCommerce Lottery plugin for WordPress is vulnerable to Time-Based SQL Injection via 'orderby' and 'order' GET Parameters in all versions up to, and including, 2.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient prep…

    wpgenie WooCommerce Lottery Web / CMS