hippoo_mobile_app_for_woocommerce vulnerabilities

CVEs whose affected-version data names the hippoo_mobile_app_for_woocommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111601Medium· 6.1

today

Hippoo Mobile App for WooCommerce <= 1.12.0 - Reflected Cross-Site Scripting via 'token_id' Parameter

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_id' parameter in all versions up to, and including, 1.12.0 due to insufficient input sanitization and output escapi…

▾ Sunlithippooo · Hippoo Mobile App for WooCommercevia CVEORG