Wpify vulnerabilities
We track 2 vulnerabilities in Wpify products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 24, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Wpify vulnerabilities
- 8.0 High severity
WPify Woo – Withdrawal, CRN/VAT, QR payments…: Improper Privilege Management
The Wpify Woo plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 5.4.16. This is due to the SettingsApi::save_option() REST route (POST /wp-json/wpify-woo/v1/option) passing the request-supplied 'option' and 'data' par
- 9.9 Critical severity
WPify Woo Czech: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from n/a through <= 5.4.1.