What’s Vulnerable › Products

wpclever WPC Smart Messages for WooCommerce vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your wpclever WPC Smart Messages for WooCommerce version is affected

Latest wpclever WPC Smart Messages for WooCommerce vulnerabilities

• CVE-2026-6725 — WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute (CVSS 6.4)
• CVE-2025-62903 — WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-10437 — WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation (CVSS 4.3)
• CVE-2024-10436 — WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion (CVSS 8.8)