WowStore – Store Builder & Product Blocks for WooCommerce

WowStore – Store Builder & Product Blocks for WooCommerce has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 7 are fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (43%). Other recurring categories include Missing Authorization, Deserialization Of Untrusted Data.

Every one of the 7 issues recorded for WowStore – Store Builder & Product Blocks for WooCommerce has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (2) reported by Wordfence PRISM. WowStore – Store Builder & Product Blocks for WooCommerce is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

7

Get automatic notifications for all WowStore – Store Builder & Product Blocks for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-23512

ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks <= 3.1.4 - PHP Object Injection via wopb_wishlist and wopb_compare

Read the full analysis

Vulnerability Records

7 records
WowStore – Store Builder & Product Blocks for WooCommerce banner
Latestv4.6.0

WowStore – Store Builder & Product Blocks for WooCommerce

WPXPO

Author

WPXPO

4.6(113)
92/100
Last Updated
2026-10-22 (6d ago)
Active Installs
4,000+
Downloads
419,150
Requires WP
6.8+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2020-04-23 (7y ago)
Requires Plugins
woocommerce

🥇 WooCommerce Builder for Gutenberg 📈 Build professional eCommerce stores and boost earnings 😲 Free Demo | 🔥 WowStore Pro | 📃 Documentation WowStore – WooCommerce Builder & Blocks Plugin with Sales Boosting Features! WowStore comes with numerous features to expand the default WooCommerce functionality. So you can give your eCommerce site a professional look. On top of that, its additional features help you to get more sales, boost conversions, and increase the average order value. ✅ Gutenberg Product Blocks ✅ Store Builder ✅ Product Grid Layout ✅ Product List Layout ✅ Product Slider and Carousel ✅ Wishlist ✅ Product Compare ✅ Variation Swatches ✅ Quick View ✅ Quick Social Share ✅ Product Video ✅ Size Chart ✅ Preorder ✅ Backorder ✅ Call for Price ✅ Name Your Price ✅ Animated Add to Cart ✅ Add to Cart Text ✅ Sales Push Notification ✅ Cart Reserved Timer ✅ Up-Selling ✅ Cross-Selling ✅ Free Shipping Bar WooCommerce Blocks WooCommerce blocks help you to display the products in an organized and professional way. WowStore has the following blocks. ✔ Product Grid Blocks ✔ Product List Blocks ✔ Product Slider Blocks ✔ Product Category Blocks ✔ List Blocks ✔ Button Group Blocks ✔ Row and Column Blocks ✔ Banner Maker Blocks Pro Features and Blocks The features below are not part of this free plugin. They are included in the separate WowStore Pro plugin, which requires a license. Without it, these blocks and features are not available. Pro blocks ✨ Product Filter Block (advanced product filter by category, color, price, rating, and more) ✨ Product Search Block ✨ Product Category 3 Block ✨ Currency Switcher Block Pro add-ons ✨ Partial Payments: Split product prices into two parts and let shoppers book products with a deposit amount. ✨ Currency Switcher: Let customers pay with their local currencies. ✨ Stock Progress Bar: Visually highlight the total and remaining quantity of products. ✨ Sticky Add to Cart: Keep the Add to Cart button sticky while scrolling the product pages. Pro options in the free features ✨ Call for Price: WhatsApp, Email and custom link buttons ✨ Quick Social Share: Mail, WhatsApp and Messenger ✨ Cart Reserved Timer: clear the cart when the timer expires ✨ Wishlist: require login, and empty the wishlist after adding to the cart ✨ Size Chart: product tab, chart image and choosing the products a chart applies to ✨ Variation Swatches: variation image swatches ✨ Product Video: videos on archive pages, autoplay, repeat and play on hover ✨ Backorder: available date and availability message ✨ Pre-Order: release date, auto convert, custom price, countdown, availability message and pre-order for variations ✨ Advanced product query: extra Order By options (popular by sales, popular by views, top rated), Most Viewed and Random sorting by time period, specific products, stock status, author include/exclude and multi-taxonomy ✨ Extra layouts for the Product Category 2 and Archive Title blocks, and the Product Slider title hover effects ✨ Template library: additional Pro starter packs, templates and patterns (shown in the library with a Pro badge, see “Pro designs in the library” below) The Ultimate WooCommerce Builder for Gutenberg WowStore helps you build store pages without leaving the Gutenberg ecosystem. It also comes with professionally designed templates for: ✔ Home Page ✔ Shop Page ✔ Product Archive Pages ✔ Product Category Pages ✔ Single Product Page ✔ Product Search Pages ✔ Cart Page ✔ Checkout Page ✔ My Account Page ✔ Thank You Page ✔ 404 Page ✔ And, Headers & Footers 👉 Explore All Templates Shopping Experience After having a good-looking eCommerce website, the next step is to ensure a better shopping experience for the customers. And, WowStore has the right features for that. Variation Swatches: Convert product variations to variation swatches to help shoppers select the right colors. Wishlist: Let the potential buyers create a wishlist of interested products. So they can decide later whether they want to buy them or not. Quick View: It helps customers to instantly view the product details in a pop-up without visiting the specific product pages. Compare: Help customers make the buying decisions faster by letting them compare multiple products side by side. Product Video: Replace featured images with product videos. The videos can be played upon clicking. Size Chart: Create and add Size Charts to product pages. So the shoppers will be able to choose the right sizes. Boost Your Sales WowStore has multiple effective features to increase sales. Explore and implement them all to see major improvements in your sales! Pre-Order: Showcase upcoming products in your store with a pre-release message, and let shoppers pre-order them within the quantity you make available. Backorder: Enable backorder to keep taking orders for the products that are currently not available in stock but will be available soon. Call for Price: Hide product prices and the Add to Cart button with a “Call for Price” button. It encourages shoppers to call you to know the prices. Increase Conversion Getting customers to your WooCommerce store is challenging and not being able to convert them is frustrating. Don’t worry, WowStore WooCommerce Builder has multiple features that help you to ensure better conversion rates. Name Your Price: Empower your shoppers to purchase products with their desired price. You can add some suggested prices with minimum and maximum price restrictions. Animated Add to Cart: Animate the Add to Cart buttons to encourage shoppers to buy sooner rather than later. Add to Cart Button Text: Replace the text of the Add to Cart buttons effortlessly. You can add your desired text for all types of products including Simple, Variable, Grouped, and External products. Sales Push Notification: Highlight recently purchased products in a notification popup, with an option to show or hide the buyer’s name, to give your store’s visitors confidence to place orders. Reduce Cart Abandonment WowStore also has solutions to reduce Cart Abandonment rates. Check out the features below: Smart Cart Page: WowStore’s WooCommerce Builder gives you the control to make cart pages from scratch to ensure the process is simpler for the shoppers. Cart Reserved Timer: It allows you to display a countdown timer and a FOMO message. So you can create an urgency among the customers to complete the buying process faster. Increase Average Order Value Increasing the average value can help you to increase revenue with the same number of sales that you usually get. WowStore has the right features for that as well. Upsell Products: Showcase higher price alternatives as related products. Shoppers may choose a pricier alternative, which earns you more per sale. Cross Selling: Displaying related supplementary products to the cart pages increases the chances of cross-selling. Free Shipping Progress Bar: If you are offering free shipping based on purchase amount try adding the progress bar to the cart page. It highlights how much the customers need to spend to enjoy free shipping. Other Wow Plugins by WPXPO We are glad that you are considering WowStore. Please have a look at our other plugins that can also improve your WordPress and WooCommerce sites. 📄 WowInvoice 🔥: A powerful PDF invoices & packing slips plugin for WooCommerce that helps you automate essential order documents with ease. 🚚 WowShipping 🔥: An all-in-one table rate shipping plugin for WooCommerce, featuring 30+ shipping rates and seamless integrations with popular carriers including UPS, USPS, DHL, Sendle, and more. ➕ WowAddons 🔥: Start selling highly customizable products with 25+ extra product options, addons, and custom fields, helping you increase order value while making your customer happy. 💲 WowRevenue: The all-in-one revenue-boosting plugin with various features like WooCommerce product bundles, mix-and-match product bundles, and more. 📦 WholesaleX: The ultimate dynamic pricing and discount solution with additional features to manage both B2B and B2C customers in the same store. 🧲 WowOptin: The most advanced and futuristic Optin plugin that helps to collect leads, increase sales, boost conversions, and reduce abandoned carts. 📃 PostX: WordPress plugin to create complete News, Magazine, and Blogging sites. It helps you make your site ready in just three simple steps. Author Developed by WPXPO. Contribute to Gutenberg WooCommerce Blocks on Bitbucket and join the party. Plugin Source The plugin source code and build tools are publicly available. Contributions are welcome. Source Code External services WowStore uses these external services, including services operated by WPXPO. Browser requests expose IP address, browser details, and potentially referrer and service cookies; server requests expose the server IP and normal HTTP details. Free library content requires no WPXPO account. Pro library content requires the separate licensed WowStore Pro plugin. Public fonts and avatars require no provider account. Video and social services may require an account depending on the content or action. Configure external media and fonts only if you accept the provider’s terms and privacy policy; use locally hosted media and system fonts to avoid those provider requests. WPXPO template and design library: Supplies presets, designs, and templates from wopb.wpxpo.com/wp-json/restapi/v2/. Opening library features downloads missing or expired catalogs through wopbdata; resetting refreshes them. Selecting a design or template for import contacts single-design, single-template, or single-premade through the browser or your server. Requests send the catalog type, design_id, template_id, or section_id, and the license key only when the WowStore Pro plugin is active and supplies one. Displaying catalog previews or imported remote images also contacts the image hosts specified by that content. The library lists every design and template of the catalog, as described under “Pro designs in the library” below. Terms | Privacy Policy Gravatar (Automattic): Displays My Account and Archive Title avatars, unless replaced by another avatar provider. Image requests to gravatar.com send an email-derived hash, image size, and default-image settings when displayed, without a plain email address. Terms | Privacy Policy Google Fonts: Loads selected fonts from fonts.googleapis.com and fonts.gstatic.com when editor previews or pages render them and they are not cached. Requests include font families and styles, without customer account or order data. Terms | Privacy Policy YouTube (Google): Displays tutorials and configured video embeds from youtube.com when the player is rendered. For a Product Video add-on URL, WordPress also requests embed code from YouTube on your server when the product media renders. The add-on does not cache that embed response itself. Requests include the video URL or ID and player settings; YouTube may use cookies and process playback interactions. Terms | Privacy Policy Vimeo: Displays Product Video add-on embeds and editor video previews from player.vimeo.com when the player is rendered. For a Vimeo URL, WordPress also requests embed code from vimeo.com on your server when the product media renders. The add-on does not cache that embed response itself. Requests include the video URL or ID and player settings; Vimeo may use cookies and process playback interactions. Terms | Privacy Policy Other configured video and media hosts: Product Video passes the merchant’s configured URL to WordPress oEmbed, which may contact another supported provider or the URL’s discovered embed endpoint to request player HTML. If no embed is available, the visitor’s browser loads the configured MP4 URL; a configured remote fallback image also contacts its image host. These requests occur when the product media renders and can expose the configured URL, server or visitor IP address, browser details, and referrer to that host. Hosting files on your own site avoids a separate media provider. Provider availability follows your WordPress configuration; review the chosen host’s Terms and Privacy Policy before configuring its URL. WordPress embed providers Social Share links contact the chosen service only when clicked, sending the product/page URL to open its sharing interface. No social tracking SDK is loaded and displaying links does not submit messages or posts. Facebook and Messenger (Meta): facebook.com sharing and Messenger send dialogs. Messenger also receives a fixed Facebook application ID built into WowStore (not configurable), and the page URL as the redirect URL. Terms | Privacy Policy. X (Twitter): twitter.com sharing URL; Terms | Privacy Policy. LinkedIn: linkedin.com; Terms | Privacy Policy. Pinterest: pinterest.com; Terms | Privacy Policy. Reddit: reddit.com; Terms | Privacy Policy. WhatsApp (Meta): api.whatsapp.com; Terms | Privacy Policy. Skype (Microsoft): the legacy web.skype.com sharing link sends the page URL when opened. Call for Price can also hand a configured Skype identifier to an installed application using a skype: link. Availability depends on Microsoft’s current service support; Terms | Privacy Policy. Telephone: Call for Price links open the visitor’s chosen app with the configured number. WowStore does not place calls itself. Email sharing: A mailto: share link opens the visitor’s chosen email app with the product/page URL. WowStore does not send the email itself. Pro designs in the library The WowStore template library is a content catalog that WPXPO hosts and updates remotely (see External services). Some of its designs belong to the separate WowStore Pro plugin. WowStore shows them next to the others with a “Pro” badge and a link to the WowStore Pro page, so you can see what the paid plugin adds. This is a preview for promotion only. Nothing in WowStore is disabled, limited, time-limited or switched off to make room for it. Every design and template that isn’t marked Pro, and every feature, block and add-on in this plugin, works without a license and without an account. A Pro design is a remote catalog entry, not code that ships in this plugin. Inserting one needs the separate WowStore Pro plugin, which sends its license key with the request. Without it, WowStore only shows the badge and the link. You can ignore the badge. The library has a filter for Free and Pro designs, and the Pro designs add nothing to your site unless you insert them. Third-party libraries WowStore includes open source libraries (React, Slick, flexMenu and others) under GPL-compatible licenses. The full list with versions and sources, and the complete copyright and license text of each library, is in licenses.txt in the plugin folder. The readable source of the compiled scripts is in the public repository linked under Plugin Source.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C