Hippooo vulnerabilities
We track 3 vulnerabilities in Hippooo products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
Latest Hippooo vulnerabilities
- 7.1 High severity
Hippoo Mobile App for WooCommerce: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mobile App for WooCommerce hippoo allows Reflected XSS.This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.12.0.
- 9.8 Critical severity
Hippoo Mobile App for WooCommerce: Improper Authorization
The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1.9.4. This is due to a logic conflation in HippooPermissions::get_user_permissions(
- 7.5 High severity
Hippoo Mobile App for WooCommerce: Improper Limitation of a Pathname to a Restricted Directory
The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.1 via the template_redirect() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary