hippooo vulnerabilities
6 published CVEs name hippooo among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111601
Hippoo Mobile App for WooCommerce <= 1.12.0 - Reflected Cross-Site Scripting via 'token_id' Parameter
hippooo · Hippoo Mobile App for WooCommerce
Medium6.1 - CVE-2026-108483
WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability
hippooo · Hippoo Mobile App for WooCommerce
High7.1 - CVE-2026-49065
WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability
hippooo · Hippoo Mobile App for WooCommerce
High8.2 - CVE-2026-10580
Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API
hippooo · Hippoo Mobile App for WooCommerce
Critical9.8 - CVE-2025-12655
Hippoo Mobile App for WooCommerce <= 1.7.1 - Missing Authorization to Unauthenticated Limited File Write
hippooo · Hippoo Mobile App for WooCommerce
Medium5.3 - CVE-2025-13339
Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read
hippooo · Hippoo Mobile App for WooCommerce
High7.5