Dotstore vulnerabilities
We track 6 vulnerabilities in Dotstore products across 6 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 2, 2026.
Latest Dotstore vulnerabilities
- 7.5 High severity
WooCommerce Product Attachment: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore WooCommerce Product Attachment woo-product-attachment allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Product Attachment: from n/a throu
- 7.1 High severity
Extra Fees Plugin for WooCommerce: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forgery.This issue affects Extra Fees Plugin for WooCommerce: from n/a through <= 4.3.3.
- 7.5 High severity
Fraud Prevention For Woocommerce: Missing Authorization
Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fraud Prevention For
- 8.8 High severity
Woocommerce Category Banner Management: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Dotstore Woocommerce Category Banner Management banner-management-for-woocommerce allows Object Injection.This issue affects Woocommerce Category Banner Management: from n/a through <= 2.5.1.
- 9.8 Critical severity
Advanced Linked Variations for Woocommerce: Missing Authorization
Missing Authorization vulnerability in Dotstore Advanced Linked Variations for Woocommerce linked-variation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Linked Variations for Woocommerce: from n/a through
- 7.1 High severity
Advance Menu Manager: Missing Authorization
Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through <= 3.1.1.