WordPress plugin
Appy Pie Connect for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium0
- Low0
All Appy Pie Connect for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password ≤1.1.2Update to 1.1.3 | CVE-2025-9286 |
- Critical9.8Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password
≤1.1.2Update to 1.1.3
Appy Pie Connect for WooCommerce: common questions
Does Appy Pie Connect for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Appy Pie Connect for WooCommerce: 1 critical. None are known to affect version null.
How do I check which version of Appy Pie Connect for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Appy Pie Connect for WooCommerce vulnerability?
CVE-2025-9286, published Oct 2, 2025: Appy Pie Connect for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password. Severity: Critical (CVSS 9.8).
Is any Appy Pie Connect for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Appy Pie Connect for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.
