WordPress plugin
Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High4
- Medium3
- Low0
All Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter ≤8.97.0Update to 8.98.0 | CVE-2026-18443 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤8.90.0Update to 8.91.0 | CVE-2026-57704 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤8.91.0Update to 8.92.0 | CVE-2026-14203 | |
| High8.8 | Authenticated (Contributor+) Privilege Escalation ≤8.85.0Update to 8.86.0 | CVE-2026-45216 | |
| Medium4.9 | Authenticated (Administrator+) SQL Injection ≤8.52.0Update to 8.53.0 | CVE-2025-22710 | |
| Medium4.3 | Missing Authorization ≤8.45.0Update to 8.46.0 | CVE-2024-49687 | |
| High7.2 | WooCommerce Advanced Bulk Edit, Inventory Management & more... <= 8.27.0 - Authenticated (Admin+) SQL Injection ≤8.27.0Update to 8.28.0 | CVE-2024-0566 | |
| Critical9.8 | Unauthenticated SQL Injection <3.9.7Update to 3.9.7 | — |
- High8.8Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter
≤8.97.0Update to 8.98.0
- High7.2Unauthenticated Stored Cross-Site Scripting
≤8.90.0Update to 8.91.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤8.91.0Update to 8.92.0
- High8.8Authenticated (Contributor+) Privilege Escalation
≤8.85.0Update to 8.86.0
- Medium4.9Authenticated (Administrator+) SQL Injection
≤8.52.0Update to 8.53.0
- Medium4.3Missing Authorization
≤8.45.0Update to 8.46.0
- High7.2WooCommerce Advanced Bulk Edit, Inventory Management & more... <= 8.27.0 - Authenticated (Admin+) SQL Injection
≤8.27.0Update to 8.28.0
- Critical9.8Unauthenticated SQL Injection
<3.9.7Update to 3.9.7
Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet): common questions
Does Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet): 1 critical, 4 high, 3 medium. None are known to affect version null.
How do I check which version of Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) vulnerability?
CVE-2026-18443, published Oct 2, 2026: Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter. Severity: High (CVSS 8.8).
Is any Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) vulnerability listed in CISA KEV?
No. None of the known Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) vulnerabilities is currently listed in the CISA KEV catalog.