Vendor

WPify

3 known vulnerabilities.

Products

WPify Woo Czech 2 WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.0

CVE-2026-12736

WPify Woo <= 5.4.16 - Authenticated (Shop Manager+) Privilege Escalation via Arbitrary Option Update via save_option REST Endpoint

The Wpify Woo plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 5.4.16. This is due to the SettingsApi::save_option() REST route (POST /wp-json/wpify-woo/v1/option) passing the request-supplied 'option' and 'data' pa…

WPify WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce Web / CMS

Jul 24, 2026