StoreApps vulnerabilities
We track 4 vulnerabilities in StoreApps products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2026.
Latest StoreApps vulnerabilities
- 8.8 High severity
Smart Manager – WooCommerce Bulk Edit…: Improper Neutralization of Special Elements used in an SQL Command
The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'access_privileges' parameter in all versions up to, and including, 8.97.0 due to insufficient escaping on the user su
- 8.8 High severity
Smart Manager: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in StoreApps Smart Manager allows Privilege Escalation. This issue affects Smart Manager: from n/a through 8.85.0.
- 7.6 High severity
Smart Manager: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through <= 8.52.0.
- 8.8 High severity
News Announcement Scroll: Improper Neutralization of Special Elements used in an SQL Command
The News Announcement Scroll plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S