# wpclever WPC Smart Messages for WooCommerce.

Every CVE that names wpclever WPC Smart Messages for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-6725.md)
  `CVE-2026-6725` · CVE record: wpclever WPC Smart Messages for WooCommerce · CVSS 6.4 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Cross-site scripting (XSS)
- [WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2025-62903.md)
  `CVE-2025-62903` · CVE record: WPClever WPC Smart Messages for WooCommerce · CVSS 6.5 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site scripting (XSS)
- [WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation](https://agentprime.io/advisories/CVE-2024-10437.md)
  `CVE-2024-10437` · CVE record: wpclever WPC Smart Messages for WooCommerce · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2024 · Tags: Broken access control
- [WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-10436.md)
  `CVE-2024-10436` · CVE record: wpclever WPC Smart Messages for WooCommerce · CVSS 8.8 High · Not analysed yet · Published 29 Oct 2024 · Tags: File inclusion

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=wpclever-wpc-smart-messages-for-woocommerce>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/wpclever-wpc-smart-messages-for-woocommerce/>. Everything for agents: <https://agentprime.io/llms.txt>.