Advisories · Technology

powerfulwp Local Delivery Drivers for WooCommerce.

Every CVE that names powerfulwp Local Delivery Drivers for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66468 CVE record

CVSS 7.1 High

WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability
- powerfulwp Local Delivery Drivers for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2026
CVE-2022-4974 CVE record

CVSS 6.3 Medium

Freemius SDK <= 2.4.2 - Missing Authorization Checks
- dashlabsltd YASR – Yet Another Star Rating Plugin for WordPress
- nicheaddons Events Addon for Elementor
- Broken access control
Not analysed yet 16 Oct 2024
CVE-2023-51481 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Local Delivery Drivers for WooCommerce plugin <= 1.9.0 - Unauthenticated Account Takeover vulnerability
- powerfulwp Local Delivery Drivers for WooCommerce
- Privilege escalation
Not analysed yet 17 May 2024