WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint
cve-program ·
Vendor product: WPC Shop as a Customer for WooCommerce
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: WPC Shop as a Customer for WooCommerce
cve-program ·
Vendor product: Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
cve-program ·
Vendor product: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
cve-program ·
Vendor product: Ad Inserter – Ad Manager & AdSense Ads
cve-program ·
Vendor product: Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
cve-program ·
Vendor product: DevKit Pro
cve-program ·
Vendor product: Divi Membership
cve-program ·
Vendor product: CTX Feed Pro
cve-program ·
Vendor product: Super Forms – Drag & Drop Form Builder
cve-program ·
Vendor product: Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder
cve-program ·
Vendor product: SiteOrigin Widgets Bundle
cve-program ·
Vendor product: Autoptimize
cve-program ·
Vendor product: BA Book Everything
cve-program ·
Vendor product: MW WP Form
cve-program ·
Vendor product: CMB2
cve-program ·
Vendor product: Relevanssi – A Better Search
cve-program ·
Vendor product: MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions
cve-program ·
Vendor product: Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
cve-program ·
Vendor product: Newsletter – Send awesome emails from WordPress
cve-program ·
Vendor product: JetFormBuilder — Dynamic Blocks Form Builder
cve-program ·
Vendor product: Mang Board
cve-program ·
Vendor product: Kubio AI Page Builder
cve-program ·
Vendor product: Smash Balloon Social Post Feed – Simple Social Feeds for WordPress
cve-program ·
Vendor product: No External Links
cve-program ·
Vendor product: Listdom: AI-powered Business Directory with Classifieds Ads Listings
cve-program ·
Vendor product: Download Manager
cve-program ·
Vendor product: Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
cve-program ·
Vendor product: JSON API Auth
cve-program ·
Vendor product: W3 Total Cache
cve-program ·
Vendor product: All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)
cve-program ·
Vendor product: WP Statistics – Simple, privacy-friendly Google Analytics alternative
cve-program ·
Vendor product: Divi Membership
cve-program ·
Vendor product: Beaver Builder Page Builder – Drag and Drop Website Builder
cve-program ·
Vendor product: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
cve-program ·
Vendor product: Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
cve-program ·
Vendor product: SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent
cve-program ·
Vendor product: SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent
cve-program ·
Vendor product: Ivory Search – WordPress Search Plugin
cve-program ·
Vendor product: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
cve-program ·
Vendor product: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
cve-program ·
Vendor product: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
cve-program ·
Vendor product: Real Cookie Banner: GDPR & ePrivacy Cookie Consent
cve-program ·
Vendor product: Groundhogg — CRM, Newsletters, and Marketing Automation
cve-program ·
Vendor product: EWWW Image Optimizer
cve-program ·
Vendor product: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
cve-program ·
Vendor product: EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents
cve-program ·
Vendor product: Helpdesk Support Ticket System for WooCommerce
cve-program ·
Vendor product: Alt Text AI – Automatically generate image alt text for SEO and accessibility
cve-program ·
Vendor product: Wp Social Login and Register Social Counter
cve-program ·
Vendor product: Visitor Traffic Real Time Statistics
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.