XforWooCommerce vulnerabilities
We track 2 vulnerabilities in XforWooCommerce products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 20, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest XforWooCommerce vulnerabilities
- 7.2 High severity
Product Filter for WooCommerce: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through <= 9.1.2.
- 8.8 High severity
XforWooCommerce: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in XforWooCommerce allows PHP Local File Inclusion.This issue affects XforWooCommerce: from n/a through 2.0.2.