Advanced Coupons For Woocommerce Free Vulnerabilities

The Advanced Coupons for WooCommerce Coupons plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.7.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbi...

CVSS:

6.4

Affected:

up to 4.7.1.1

Fixed in:

4.7.2

Disclosed:

Mar 28, 2026

CVE-2026-39508 on NVD →

The Advanced Coupons for WooCommerce Coupons plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 4.7.1. This makes it possible for authenticated attackers, with contributor-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 4.7.1

Fixed in:

4.7.1.1

Disclosed:

Feb 6, 2026

CVE-2026-31919 on NVD →

The Advanced Coupons for WooCommerce Coupons plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 4.6.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with shop...

CVSS:

4.9

Affected:

up to 4.6.8

Fixed in:

4.6.9

Disclosed:

Oct 16, 2025

CVE-2025-62015 on NVD →

The Advanced Coupons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5. This is due to missing or incorrect nonce validation on the get_all_admin_notices function. This makes it possible for unauthenticated attackers to hide admin notices, via forged request granted...

CVSS:

8.8

Affected:

up to 4.5

Fixed in:

4.5.0.1

Disclosed:

Oct 30, 2022

CVE-2022-43481 on NVD →