Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

WPC Smart Messages for WooCommerce — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in WPC Smart Messages for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: wpclever

CVE IDTitleCVSSSeverityPublished
CVE-2026-6725 WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute CWE-79 6.4 Medium2026-04-28
CVE-2025-62903 WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2025-10-27
CVE-2024-10436 WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion CWE-98 8.8 High2024-10-29
CVE-2024-10437 WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation CWE-862 4.3 Medium2024-10-29

All 4 known CVE vulnerabilities affecting WPC Smart Messages for WooCommerce with full Chinese analysis, references, and POCs where available.