What’s Vulnerable › Products

hippooo Hippoo Mobile App for WooCommerce vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your hippooo Hippoo Mobile App for WooCommerce version is affected

Latest hippooo Hippoo Mobile App for WooCommerce vulnerabilities

• CVE-2026-111601 — Hippoo Mobile App for WooCommerce <= 1.12.0 - Reflected Cross-Site Scripting via 'token_id' Parameter (CVSS 6.1)
• CVE-2026-108483 — WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-49065 — WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability (CVSS 8.2)
• CVE-2026-10580 — Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API (CVSS 9.8)
• CVE-2025-12655 — Hippoo Mobile App for WooCommerce <= 1.7.1 - Missing Authorization to Unauthenticated Limited File Write (CVSS 5.3)
• CVE-2025-13339 — Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read (CVSS 7.5)