Critical flaw found in the WooCommerce Stripe Gateway PluginSecurity Affairs·Jun 14, 13:32 UTC · Jun 14, 2023VulnerabilityCVE-2023-3400060
WooCommerce Patches Critical Plugin Flaw Affecting Half a Million SitesInfosecurity Magazine·Mar 24, 17:00 UTC · Mar 24, 2023Vulnerability in the wild60
WooCommerce Bug Exploited in Targeted WordPress AttacksInfosecurity Magazine·Jul 18, 10:30 UTC · Jul 18, 2023VulnerabilityCVE-2023-2812160
Critical WooCommerce Payments Plugin Flaw Patched for 500,000+ WordPress SitesThe Hacker News·Mar 24, 07:51 UTC · Mar 24, 2023Vulnerability in the wild60
Critical Flaw Found in WordPress Plugin for WooCommerce Used by 30,000 WebsitesThe Hacker News·Jun 22, 10:17 UTC · Jun 22, 2023VulnerabilityCVE-2023-2986CVE-2023-283460
Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway PluginThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023VulnerabilityCVE-2023-3400060
Critical FunnelKit vulnerability threatens 40,000+ WooCommerce checkoutsSansec (Magento / e-commerce security)·May 26, 14:45 UTC · May 26, 2026Vulnerability in the wildCVE-2026-4710060
Experts warn of attacks exploiting WordPress gift card pluginSecurity Affairs·Dec 25, 19:42 UTC · Dec 25, 2022VulnerabilityCVE-2022-4535960
Attackers exploit Funnel Builder bug to inject e-skimmers into eSecurity Affairs·May 17, 12:25 UTC · May 17, 2026Vulnerability in the wild60
Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist PluginThe Hacker News·May 29, 08:52 UTC · May 29, 2025VulnerabilityCVE-2025-4757760
Magento Security Release APSB25Sansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026VulnerabilityCVE-2023-3821860
Fancy Product Designer Plugin Flaws Expose WordPress SitesInfosecurity Magazine·Jan 9, 17:15 UTC · Jan 9, 2025VulnerabilityCVE-2024-51919CVE-2024-5181860
LiteSpeed Cache Plugin Vulnerability Poses Admin Access RiskInfosecurity Magazine·Oct 30, 17:15 UTC · Oct 30, 2024VulnerabilityCVE-2024-5055060
WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS AttacksThe Hacker News·Oct 7, 06:13 UTC · Oct 7, 2024VulnerabilityCVE-2024-47374CVE-2024-44000CVE-2024-43917+2 CVEs60
Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code ExecutionThe Hacker News·Aug 31, 15:15 UTC · Aug 31, 2024VulnerabilityCVE-2024-638660
GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at RiskThe Hacker News·Aug 21, 04:35 UTC · Aug 21, 2024VulnerabilityCVE-2024-5932CVE-2024-6500CVE-2024-7094+4 CVEs60
RCE in popular ThemeREX WordPress Plugin has been actively exploitedSecurity Affairs·Mar 11, 21:27 UTC · Mar 11, 2020Vulnerability in the wild60