Dotstore
9 CVEs across 8 Dotstore products. Browse Dotstore vulnerabilities, severities, and proof-of-concept exploits.
Dotstore products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-39671 | High | 7.1 | 2026-04-08 | Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Reque… |
CVE-2026-25443 | High | 7.5 | 2026-03-19 | Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Expl… |
CVE-2026-22354 | High | 8.8 | 2026-02-20 | Deserialization of Untrusted Data vulnerability in Dotstore Woocommerce Category Banner Management banner-management-for-woocommerce allows Object Injection.Th… |
CVE-2026-24553 | Medium | 4.3 | 2026-01-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-… |
CVE-2025-46244 | Medium | 5.3 | 2025-04-22 | Missing Authorization vulnerability in Dotstore Advanced Linked Variations for Woocommerce linked-variation allows Exploiting Incorrectly Configured Access Con… |
CVE-2025-22694 | Medium | 4.3 | 2025-02-03 | Missing Authorization vulnerability in Dotstore Hide Shipping Method For WooCommerce hide-shipping-method-for-woocommerce.This issue affects Hide Shipping Meth… |
CVE-2025-23991 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in Dotstore Product Size Charts Plugin for WooCommerce woo-advanced-product-size-chart.This issue affects Product Size Char… |
CVE-2024-54381 | High | 7.1 | 2024-12-18 | Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through <= 3.1.1. |
CVE-2024-54227 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Dotstore Minimum and Maximum Quantity for WooCommerce min-and-max-quantity-for-woocommerce allows Exploiting Incorrectly… |