{"items":[{"id":"CVE-2026-18443","published":"2026-10-03T06:38:25.238Z","updated":"2026-10-03T15:42:41.352Z","title":"Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter","severity":"HIGH","score":8.8,"vendor":"storeapps","product":"Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet)","kev":false,"epss":0.00366,"kevAdded":null},{"id":"CVE-2026-57704","published":"2026-07-23T11:18:07.981Z","updated":"2026-07-23T15:04:01.599Z","title":"WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"StoreApps","product":"Smart Manager","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-45216","published":"2026-05-25T22:30:26.044Z","updated":"2026-05-26T10:50:28.271Z","title":"WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"StoreApps","product":"Smart Manager","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2026-24365","published":"2026-01-22T16:52:44.706Z","updated":"2026-04-28T16:14:47.927Z","title":"WordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"storeapps","product":"Stock Manager for WooCommerce","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2025-22710","published":"2025-01-21T13:57:34.445Z","updated":"2026-04-28T16:11:05.782Z","title":"WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability","severity":"HIGH","score":7.6,"vendor":"storeapps","product":"Smart Manager","kev":false,"epss":0.00864,"kevAdded":null},{"id":"CVE-2024-49687","published":"2024-12-31T13:56:30.696Z","updated":"2026-05-11T22:30:01.772Z","title":"WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"storeapps","product":"Smart Manager","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2023-5663","published":"2024-03-13T15:27:11.281Z","updated":"2026-04-08T17:16:27.266Z","title":"News Announcement Scroll <= 9.0.0 -  Authenticated (Contributor+) SQL Injection via Shortcode","severity":"HIGH","score":8.8,"vendor":"storeapps","product":"News Announcement Scroll","kev":false,"epss":0.00773,"kevAdded":null},{"id":"CVE-2023-35091","published":"2023-07-11T12:45:57.409Z","updated":"2026-04-28T16:08:29.580Z","title":"WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF)","severity":"MEDIUM","score":4.3,"vendor":"StoreApps","product":"Stock Manager for WooCommerce","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2022-40694","published":"2022-11-17T22:17:27.196Z","updated":"2026-04-28T16:07:48.125Z","title":"WordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":4.8,"vendor":"StoreApps","product":"News Announcement Scroll (WordPress plugin)","kev":false,"epss":0.00433,"kevAdded":null},{"id":"CVE-2022-36284","published":"2022-08-05T15:08:51.582Z","updated":"2026-04-28T16:07:44.759Z","title":"WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change","severity":"MEDIUM","score":6.4,"vendor":"StoreApps","product":"Affiliate For WooCommerce (WordPress plugin)","kev":false,"epss":0.00651,"kevAdded":null},{"id":"CVE-2022-25649","published":"2022-08-05T15:07:52.745Z","updated":"2026-04-28T16:07:39.241Z","title":"WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities","severity":"MEDIUM","score":5,"vendor":"StoreApps","product":"Affiliate For WooCommerce (WordPress plugin)","kev":false,"epss":0.00908,"kevAdded":null},{"id":"CVE-2021-34619","published":"2021-07-21T11:09:37.170Z","updated":"2024-09-16T22:35:25.662Z","title":"Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin","severity":"HIGH","score":8.8,"vendor":"StoreApps","product":"WooCommerce Stock Manager","kev":false,"epss":0.00719,"kevAdded":null}]}