Advanced Coupons for WooCommerce – BOGO Coupons, Store Credit & WooCommerce Coupon Plugin

Advanced Coupons for WooCommerce – BOGO Coupons, Store Credit & WooCommerce Coupon Plugin has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 4 are fixed as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (25%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 4 issues recorded for Advanced Coupons for WooCommerce – BOGO Coupons, Store Credit & WooCommerce Coupon Plugin has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each.

01234567891030.10.2022Today30.10.20228.8Advanced Coupons for WooCommerce Coupons <= 4.5 - Cross-Site Request Forgery CVSS 8.8 · 30.10.202216.10.20254.9Advanced Coupons for WooCommerce Coupons <= 4.6.8 - Authenticated (Shop manager+) SQL Injection CVSS 4.9 · 16.10.202506.02.20264.3Advanced Coupons for WooCommerce Coupons <= 4.7.1 - Missing Authorization CVSS 4.3 · 06.02.202628.03.20266.4Advanced Coupons for WooCommerce Coupons <= 4.7.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 28.03.2026

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Advanced Coupons for WooCommerce – BOGO Coupons, Store Credit & WooCommerce Coupon Plugin vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2022-43481

Advanced Coupons for WooCommerce Coupons <= 4.5 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C