Hide Category by User Role for WooCommerce
Hide Category by User Role for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 2 of the records (100%).
Every one of the 2 issues recorded for Hide Category by User Role for WooCommerce has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Hide Category by User Role for WooCommerce is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-13441Hide Category by User Role for WooCommerce <= 2.3.1 - Missing Authorization to Unauthenticated Cache Flushing
Read the full analysisVulnerability Records
Hide Category by User Role for WooCommerce
Author
ThemeSupport
This plugin allows you to easily hide WooCommerce categories based on User Role. You can also choose to redirect users to a URL or display a custom message when they attempt to access a hidden category or its related products. This plugin has been tested with the most recognized user role management plugins. However, if you notice any bugs, please contact us.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C