Hippooo Hippoo Mobile App For Woocommerce
4 CVEs affecting Hippooo Hippoo Mobile App For Woocommerce. Latest disclosed: 2026-06-15. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-10580 | Critical | 9.8 | 2026-06-05 | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up… |
CVE-2026-49065 | High | 8.2 | 2026-06-15 | Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versions. |
CVE-2025-13339 | High | 7.5 | 2025-12-10 | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.1 via the template_redirec… |
CVE-2025-12655 | Medium | 5.3 | 2025-12-12 | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to arbitrary file write via a missing authorization check in all versions up to, and i… |