Hippoo Mobile App for WooCommerce vulnerabilities

3 known vulnerabilities in Hippoo Mobile App for WooCommerce from Hippooo. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Hippoo Mobile App for WooCommerce: Improper Neutralization of Input During Web Page Generation

  CVE-2026-108483Oct 14, 2026Hippooo

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mobile App for WooCommerce hippoo allows Reflected XSS.This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.12.0.

• 9.8 Critical severity

  Hippoo Mobile App for WooCommerce: Improper Authorization

  CVE-2026-10580Jun 5, 2026HippoooEPSS 2.95%

  The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1.9.4. This is due to a logic conflation in HippooPermissions::get_user_permissions(

• 7.5 High severity

  Hippoo Mobile App for WooCommerce: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-13339Dec 10, 2025HippoooEPSS 2.37%

  The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.1 via the template_redirect() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary