Unauthenticated Arbitrary Option Update vulnerability
28 April, 2025
Commerce plugin <= 1.2 Unauthenticated Stored CrossSite Scripting vulnerability
30 January, 2024
Commerce plugin <= 1.2 Cross Site Scripting (XSS) vulnerability
5 September, 2023
Commerce plugin <= 1.2 Cross Site Request Forgery (CSRF) vulnerability
5 September, 2023