Vulnerabilities / WowStore
WowStore vulnerabilities
Advisories WPSec published for WowStore – Store Builder & Product Blocks for WooCommerce. Other sources may list more. Its attack surface: WowStore on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-23 | WPSEC-2026-1494 | WowStore <= 4.5.8 - Authenticated (Contributor+) Sensitive Information Exposure via User Search REST Endpoint | Medium 4.3 | 4.6.0 |
| 2026-10-23 | WPSEC-2026-1493 | WowStore <= 4.5.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload | Medium 6.4 | 4.6.0 |
| 2026-10-23 | WPSEC-2026-1492 | WowStore <= 4.5.8 - Unauthenticated Insecure Direct Object Reference via Product Preview REST Endpoint | Medium 5.3 | 4.6.0 |
| 2026-10-23 | WPSEC-2026-1491 | WowStore <= 4.5.8 - Unauthenticated Price Manipulation via 'wopb_custom_prices' Parameter | Medium 5.3 | 4.6.0 |
License: CC BY 4.0