powerfulwp vulnerabilities (CVE)

CVE records published for powerfulwp, newest first. Follow to get an email when a new one appears.

4 results

7.1High

CVE-2026-66468 2 months ago

WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

powerfulwp Local Delivery Drivers for WooCommerce

Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.

4.3Medium

CVE-2025-30923 1 year ago

WordPress Gift Message for WooCommerce plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability

powerfulwp Gift Message for WooCommerce

Cross-Site Request Forgery (CSRF) vulnerability in powerfulwp Gift Message for WooCommerce gift-message-for-woocommerce allows Cross Site Request Forgery.This issue affects Gift Message for WooCommerce: from n/a through <= 1.7.8.

6.3Medium

CVE-2022-4974 2 years ago

Freemius SDK <= 2.4.2 - Missing Authorization Checks

dashlabsltd YASR – Yet Another Star Rating Plugin for WordPress; nicheaddons Events Addon for Elementor; dots Fraud Prevention For WooCommerce and EDD; wpengine Gutenberg Blocks – ACF Blocks Suite

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_d…

9.8Critical

CVE-2023-51481 2 years ago

WordPress Local Delivery Drivers for WooCommerce plugin <= 1.9.0 - Unauthenticated Account Takeover vulnerability

powerfulwp Local Delivery Drivers for WooCommerce

Improper Privilege Management vulnerability in powerfulwp Local Delivery Drivers for WooCommerce allows Privilege Escalation.This issue affects Local Delivery Drivers for WooCommerce: from n/a through 1.9.0.