Remove Add to Cart WooCommerce

Remove Add to Cart WooCommerce has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, one record each. Remove Add to Cart WooCommerce is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

5.6/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Remove Add to Cart WooCommerce vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2024-13362

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

Read the full analysis

Vulnerability Records

3 records


2026-04-30 17:17	Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Remove Add to Cart WooCommerce <= 1.4.7	`CVE-2024-13362`	6.1 Medium	Asaf Mozes	No
2023-10-25 00:00	Remove Add to Cart WooCommerce <= 1.4.4 - Cross-Site Request Forgery to Settings Modification Remove Add to Cart WooCommerce <= 1.4.4	`CVE-2023-46629`	4.3 Medium	qilin_99	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Remove Add to Cart WooCommerce < 1.4.3	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–3 of 3 reports

Latestv1.4.8

Remove Add to Cart WooCommerce

Author

themelocation

3.0(26)

60/100

Last Updated

2025-10-24 (11mo ago)

Active Installs

4,000+

Downloads

130,121

Requires WP

4.6+

Requires PHP

Tested up to

WP 6.8.8

Created

2016-04-15 (11y ago)

This Plugin performs following functions; Developed by themelocation 1- Remove/Disable Add to Cart from Complete Category. 2- Replace Add to Cart button with Inquire Us from Complete Category. 3- Remove Add to cart from individual Product pages. 4- Replace Add to cart with Inquire us from product pages. 5- Hide price from Complete Category 6- Hide Price per Product This Plugin Work on both Category Level as well as Individual Level. If Store owner do not want add to cart button on Whole category, He can remove that. If Store Owner wants to remove add to cart from Specific product, he can do that. Also, If Someone want to replace add to cart with inquiry button he can do that too with this Plugin. You can make settings on Category pages and individual Product pages.

View on WordPress.org