Skip to content
Noroxi

WPC Smart Messages for WooCommerce

wpc-smart-messages · plugin

Known security vulnerabilities for WPC Smart Messages for WooCommerce. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

latest Apr 28, 2026

Vulnerabilities

  • CVE-2024-10436

    WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion

    High 8.8

  • CVE-2025-62903

    WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-6725

    WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute

    Medium 6.4

  • CVE-2024-10437

    WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation

    Medium 4.3

← Back to directory