Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

silverplugins217 — Vulnerabilities & Security Advisories 10

Browse all 10 CVE security advisories affecting silverplugins217. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Silverplugins217 develops WordPress plugins primarily used for enhancing website functionality and user engagement. Historically, their vulnerabilities have commonly included remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insufficient input validation and improper access controls. The plugin's security posture has been marked by multiple CVEs, with several critical flaws allowing attackers to compromise websites through unauthenticated or low-privilege vectors. While no major public incidents have been widely documented, the consistent pattern of vulnerabilities across multiple releases indicates ongoing security challenges that require improved development practices and regular security audits to mitigate risks for end users.

CVE IDTitleCVSSSeverityPublished
CVE-2025-49379 WordPress Custom Fields Account Registration For Woocommerce plugin <= 1.2 - Privilege Escalation vulnerability — Custom Fields Account Registration For WoocommerceCWE-266 7.2 High2025-12-18
CVE-2025-58989 WordPress Dynamic Text Field For Contact Form 7 Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability — Dynamic Text Field For Contact Form 7CWE-79 6.5 Medium2025-09-09
CVE-2025-47451 WordPress Product Quantity Dropdown For Woocommerce plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability — Product Quantity Dropdown For WoocommerceCWE-352 4.3 Medium2025-05-07
CVE-2025-31087 WordPress Multiple Shipping And Billing Address For Woocommerce plugin <= 1.5 - PHP Object Injection Vulnerability — Multiple Shipping And Billing Address For WoocommerceCWE-502 9.8 Critical2025-04-01
CVE-2025-30888 WordPress Custom Fields Account Registration For Woocommerce Plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability — Custom Fields Account Registration For WoocommerceCWE-352 4.3 Medium2025-03-27
CVE-2025-26875 WordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.3 - SQL Injection vulnerability — Multiple Shipping And Billing Address For WoocommerceCWE-89 9.3 Critical2025-03-15
CVE-2025-24633 WordPress Build Private Store For Woocommerce plugin <= 1.0 - Broken Access Control vulnerability — Build Private Store For WoocommerceCWE-862 5.3 Medium2025-01-24
CVE-2025-22731 WordPress Build Private Store For Woocommerce plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability — Build Private Store For WoocommerceCWE-352 4.3 Medium2025-01-15
CVE-2024-56290 WordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.2 - Unauthenticated SQL Injection vulnerability — Multiple Shipping And Billing Address For WoocommerceCWE-89 9.3 Critical2025-01-07
CVE-2024-54333 WordPress Check Pincode For Woocommerce plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability — Check Pincode For WoocommerceCWE-79 7.1 High2024-12-13

This page lists every published CVE security advisory associated with silverplugins217. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.