WordPress plugin
Advanced Woo Labels – Product Labels & Badges for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium5
- Low0
All Advanced Woo Labels – Product Labels & Badges for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.4 | Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting ≤2.51Update to 2.52 | CVE-2026-12241 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_color' Parameter ≤2.48Update to 2.49 | CVE-2026-15662 | |
| High7.2 | Authenticated (Admin+) Remote Code Execution ≤2.36Update to 2.37 | CVE-2026-32414 | |
| High8.8 | Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter ≤2.36Update to 2.37 | CVE-2026-1929 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.15Update to 2.16 | CVE-2025-32188 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.01Update to 2.02 | CVE-2024-47622 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.93Update to 1.94 | CVE-2024-35675 |
- Medium5.4Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
≤2.51Update to 2.52
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_color' Parameter
≤2.48Update to 2.49
- High7.2Authenticated (Admin+) Remote Code Execution
≤2.36Update to 2.37
- High8.8Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter
≤2.36Update to 2.37
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.15Update to 2.16
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.01Update to 2.02
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.93Update to 1.94
Advanced Woo Labels – Product Labels & Badges for WooCommerce: common questions
Does Advanced Woo Labels – Product Labels & Badges for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Advanced Woo Labels – Product Labels & Badges for WooCommerce: 2 high, 5 medium. None are known to affect version null.
How do I check which version of Advanced Woo Labels – Product Labels & Badges for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Advanced Woo Labels – Product Labels & Badges for WooCommerce vulnerability?
CVE-2026-12241, published Sep 30, 2026: Advanced Woo Labels – Product Labels & Badges for WooCommerce <= 2.51 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting. Severity: Medium (CVSS 5.4).
Is any Advanced Woo Labels – Product Labels & Badges for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Advanced Woo Labels – Product Labels & Badges for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.