Hippoo Mobile App for WooCommerce
Hippoo Mobile App for WooCommerce has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Improper Authorization, Path Traversal.
Every one of the 4 issues recorded for Hippoo Mobile App for WooCommerce has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, one record each. Hippoo Mobile App for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-10580Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API
Read the full analysisVulnerability Records

Hippoo Mobile App for WooCommerce
Author
hippooo
Hippoo WooCommerce App | Your Store, Anywhere, Anytime The Hippoo WooCommerce app is a powerful extension that enhances the functionality of your WooCommerce shop. Seamlessly integrate your shop with the Hippoo mobile app (both Android and iOS) to unlock advanced features, including the creation of out-of-stock lists, adding images to order products via API, and user authentication for optimal app utilization. Take control of your shop’s inventory, order fulfillment, and customer engagement with ease. Key Features: Advanced Sales Analytics: Track revenue, top-selling products, and trends with a custom date range for deeper insights. Instant Order Notifications: Receive real-time alerts for new orders directly on your Android or iPhone. Stock Alerts: Get notified immediately when a product goes out of stock to prevent missed sales. Create & Edit Orders/Products: Customize orders and products with advanced options, including pricing, variations, and attributes. Barcode Scanner: Quickly find orders or products by scanning barcodes for faster search and management. WordPress Media Gallery Access: Upload, delete, and share media directly from your WooCommerce store. Team Collaboration & Order Sharing: Share or duplicate orders easily with your team to improve efficiency. Create and Manage Coupons: Easily generate, customize, and share discount coupons with customers to boost sales. Out-of-Stock Management: View a recent out-of-stock list and efficiently manage inventory replenishment. Invoice & Shipping Label Creation: Generate and customize invoices and shipping labels with automatic order details. iOS & Android Home Screen Widget: Quickly access your shop reports from your mobile home screen for real-time insights. Order Product Image API: Enhance order management with product images for better fulfillment and customer satisfaction. Generate product content automatically using Hippoo AI by uploading or capturing a photo of your items. Seamless integration with Shippo service to create courier shipping labels directly inside the Hippoo application. Support for extensions such as Google Analytics, custom code snippets, customer support ticketing, recent activity logs, and more. Custom event notifications for user registration, comment submission, custom order status changes, and additional triggers. Barcode Generation: Display and print barcodes for product SKUs and order IDs. Quickly find orders and products by scanning barcodes. Multi-Shop Management: Add and manage multiple WooCommerce stores for free—all in one app! Third-Party Plugin Integration: Seamlessly connect with plugins like Koko Analytics for user statistics, Code Snippets for custom code management, Google Analytics for detailed insights, and more—all within the app with a native mobile experience. Hundreds More Features: Enjoy a comprehensive toolset with exclusive WooCommerce management features you won’t find in other apps! Progressive Web App (PWA) Support Hippoo WooCommerce now enables a PWA for your store, allowing customers to install it on their devices. By default, a “Designed by Hippoo WooCommerce app” credit appears under the PWA. The entire PWA feature can be disabled in the settings. Why Use Hippoo PWA for Instagram Shop? The PWA is perfect for Instagram Shop because of its simple design, mobile-friendly interface, and fast performance. It uses the WooCommerce Store API, ensuring quick loading times and a smooth shopping experience for customers. To install the Hippoo WooCommerce app on your phone: For Android users: Visit the Google Play Store using the following link: Hippoo Android App. For iPhone users: Visit the App Store using the following link: Hippoo iOS App. Click on the “Install” button to download and install the Hippoo app on your mobile device. Open the Hippoo app and follow the on-screen instructions to authenticate your shop and start utilizing the advanced features. Short Description Manage your WooCommerce store on the go with Hippoo. Receive real-time order notifications, manage inventory, and track sales—all from your mobile device.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C